Is 80% Memory usage normal ?

Hi Gayashan,

Thank you for reaching out to Sophos Community.

Have you tried to use any how-to videos, documentation, Sophos Assistant, or KBA to try to check the issue?

I would recommend checking the following KB which might assist you.

• Sophos Firewall: Check the CPU usage using top
• Sophos Firewall: IPS configuration to prevent high CPU usage

Hello Erick,

Thank you for the KB articles, but my issue is not regarding to the CPU. I need to know its normal to RAM goes 80% on peak hours. Again thanks for the reply.

Hi Gayashan,

Yes, I understand. However, this would be best verified first upon checking the utilization when the CPU reaches 80% and checking what services have high utilization before we can say if it's normal or if there are things we can do to prevent the High Utilization.

Kindly correct me if I understand this incorrectly. Thank you.

As a preview of the Link, I've shared

• Sophos Firewall: Check the CPU usage using top

To understand real CPU usage in a multi-CPU system like the Sophos Firewall, you can't use the default top settings.

top Will sum up the CPU usage across all threads within a process, on all the CPUs. In the default view, if the sum is greater than 100%, then it’ll show 99.9%. But a 4 CPU system can handle up to 400% usage of a single CPU.

If a process shows it is 99.9%, that means it is taking something more than 100% of one CPU on a multiple-CPU system. That does not indicate there is a problem, as it may be a fraction of the total available CPU on a multi-CPU system.

• Sophos Firewall: IPS configuration to prevent high CPU usage

This article describes the proper configuration of IPS to prevent it from consuming a large portion of the CPU.

Hi Gayashan,

Yes, I understand. However, this would be best verified first upon checking the utilization when the CPU reaches 80% and checking what services have high utilization before we can say if it's normal or if there are things we can do to prevent the High Utilization.

Kindly correct me if I understand this incorrectly. Thank you.

As a preview of the Link, I've shared

• Sophos Firewall: Check the CPU usage using top

To understand real CPU usage in a multi-CPU system like the Sophos Firewall, you can't use the default top settings.

top Will sum up the CPU usage across all threads within a process, on all the CPUs. In the default view, if the sum is greater than 100%, then it’ll show 99.9%. But a 4 CPU system can handle up to 400% usage of a single CPU.

If a process shows it is 99.9%, that means it is taking something more than 100% of one CPU on a multiple-CPU system. That does not indicate there is a problem, as it may be a fraction of the total available CPU on a multi-CPU system.

• Sophos Firewall: IPS configuration to prevent high CPU usage

This article describes the proper configuration of IPS to prevent it from consuming a large portion of the CPU.

Thanks for the guidance Erick, As I check when IPS enabled CPU only goes around 50%-63%, anyway I will follow the KB articles you provide. I saw some options regarding to the IPS memlow i will try that out. Thanks again for your guidance.