Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is 80% Memory usage normal ?

Seek clarification on a matter regarding the memory usage on our Sophos XGS 2100 system.

As it stands, we currently have approximately 200 users utilizing the system. Upon conducting a thorough check, I have noticed that the memory usage reaches up to 80%. However, when the Intrusion Prevention System (IPS) is disabled, the memory usage decreases to around 50%.

Considering the aforementioned circumstances, I would like to inquire whether an 80% memory usage is considered normal for our Sophos XGS 2100 with the specified number of users. Additionally, I am curious to know if there are any recommended steps or measures we should consider taking in order to optimize the memory usage and ensure optimal performance of the system.



This thread was automatically locked due to age.
Parents Reply Children
  • Hi Gayashan,

    Yes, I understand. However, this would be best verified first upon checking the utilization when the CPU reaches 80% and checking what services have high utilization before we can say if it's normal or if there are things we can do to prevent the High Utilization.

    Kindly correct me if I understand this incorrectly. Thank you.

    As a preview of the Link, I've shared

    To understand real CPU usage in a multi-CPU system like the Sophos Firewall, you can't use the default top settings.

    top Will sum up the CPU usage across all threads within a process, on all the CPUs. In the default view, if the sum is greater than 100%, then it’ll show 99.9%. But a 4 CPU system can handle up to 400% usage of a single CPU.

    If a process shows it is 99.9%, that means it is taking something more than 100% of one CPU on a multiple-CPU system. That does not indicate there is a problem, as it may be a fraction of the total available CPU on a multi-CPU system.

    This article describes the proper configuration of IPS to prevent it from consuming a large portion of the CPU.

    Erick Jan
    Community Support Engineer | Sophos Technical Support
    Sophos Support Videos Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.

  • Thanks for the guidance Erick, As I check when IPS enabled CPU only goes around 50%-63%, anyway I will follow the KB articles you provide. I saw some options regarding to the IPS memlow i will try that out. Thanks again for your guidance.