Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 242 replies
  • Answers 6 answers
  • Subscribers 80 subscribers
  • Views 64746 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Firewall: v19.0 MR1: Feedback and experiences

LuCar Toni

Re-Release: https://community.sophos.com/sophos-xg-firewall/b/blog/posts/sophos-firewall-v19-mr1-re_2d00_release-build-365-is-now-available

https://community.sophos.com/sophos-xg-firewall/b/blog/posts/sophos-firewall-v19-mr1-is-now-available

Release Notes: https://docs.sophos.com/releasenotes/output/en-us/nsg/sf_190_rn.html

"Old" V18.5 MR4 Thread: https://community.sophos.com/sophos-xg-firewall/f/discussions/134965/sophos-firewall-v18-5-mr4-feedback-and-experiences

V19.0 GA Thread: https://community.sophos.com/sophos-xg-firewall/f/discussions/134009/sophos-firewall-v19-0-ga-feedback-and-experiences



This thread was automatically locked due to age.
Parents
  • 0

    It seems to be using a lot less RAM. Been running 3.5 hours and averaging 67% RAM usage. Usage goes up over time, so it may settle in at a higher average, but v18.5 was using about 75% on average and v19 GA was using about 80% on average, for me.

    Had a crash of v19 GA this afternoon where the blue (storage) light blinks like crazy and I slowly lose capabilities until the AP goes orange, etc and have to reboot. (This has happened maybe once a month for me, maybe once every two months.) Hopefully fixed in v19 MR1.

  • 0 in reply to Wayne Folta

    Just checked my machine. Before upgrading memory was stable around 70%, since the upgrade it climbed to now being 78%

    I'll keep monitoring this.

     
    SFVH (SFOS 20.0.0 GA-Build222) - Last (re)boot on November 6th  2023
    Asus H410i-plus - Pentium 6605 Gold - 250GB M.2 PCIe NVMe SSD - 8GB - 3 ports
    [If any of my posts are helpful to you please use the 'Verify Answer' link]
  • 0 in reply to shred

    Hello shred,

    I have exactly the same experience on my virtual app. For a long time, the RAM memory is at about 50%, but now it is at 89%. But according to the RAM load graph, the spike didn't come until midday today. Probably a bad snort engine update?

    Regards

    alda

  • 0 in reply to alda

    Ah that’s a good point on updates. Looking at mine, it looks like my IPS signatures haven’t been updated since 28 Jul but my AV and ATP was updated at 03:29:01, Aug 01 2022 which corresponds closely to the big jump in memory usage.

    ---

    Sophos XG guides for home users: https://shred086.wordpress.com/

  • 0 in reply to shred

    You can give me a Support Access ID and i will forward this for further inspection. 

    __________________________________________________________________________________________________________________

  • 0 in reply to LuCar Toni

    Sent you a message with the Access ID. Also, I can see my memory use has increased to 91% and checking top, it’s definitely the snort processes increasing in memory usage.

    ---

    Sophos XG guides for home users: https://shred086.wordpress.com/

  • 0 in reply to shred

    Avira and ATP came through at the same time and memory use has grown.

    Ian

    XG115W - v20.0.3 MR-3 - Home

    XG on VM 8 - v21 GA

    If a post solves your question please use the 'Verify Answer' button.

  • 0 in reply to rfcat_vk

    Just to wrap up: 

    NC-100681

    Increase in snort memory with ATP pattern updates

    __________________________________________________________________________________________________________________

  • 0 in reply to shred

    Further big jump earlier this evening Melbourne, AU time. The Sophos AV and Avira AV updated at approximately the same time the memory bump.

    Ian

    XG115W - v20.0.3 MR-3 - Home

    XG on VM 8 - v21 GA

    If a post solves your question please use the 'Verify Answer' button.

  • 0 in reply to rfcat_vk

    Could you send me the Access_ID? 

    __________________________________________________________________________________________________________________

  • 0 in reply to LuCar Toni

    I had a massive drop in memory usage (51% now) which appears to have occurred on 2 Aug at 15:37. The only pattern update around that time was the IPS and Application signatures at 15:30:20, Aug 02 2022. 

    ---

    Sophos XG guides for home users: https://shred086.wordpress.com/

  • 0 in reply to shred

    Thank you very much for flagging this shred. 

    We have identified an issue with ATP data update in MR1. The issue causes more memory to be consumed by IPS after the update, and the memory is not freed until an IPS sig update subsequently occurs. Last ATP data update was Monday Aug 1, which is when you saw the spike in memory. An IPS update was then done on Aug 2, which is why you saw memory usage drop back down. 

    We are now tracking this as a bug, and we're looking to release a new MR1 build with this fixed.  

Reply
  • 0 in reply to shred

    Thank you very much for flagging this shred. 

    We have identified an issue with ATP data update in MR1. The issue causes more memory to be consumed by IPS after the update, and the memory is not freed until an IPS sig update subsequently occurs. Last ATP data update was Monday Aug 1, which is when you saw the spike in memory. An IPS update was then done on Aug 2, which is why you saw memory usage drop back down. 

    We are now tracking this as a bug, and we're looking to release a new MR1 build with this fixed.  

Children
No Data
Unfiltered HTML