Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Not Answered
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 8 replies
  • Subscribers 42 subscribers
  • Views 2986 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XGS 3100, High CPU Consuption

IvanildoGalvão

We have a Sophos Firewall, XGS 3100, whose CPU consumption reaches 98% every day, and when it reaches 100%, it stops working.

There is no point in opening a ticket with Sophos, at least here in Brazil, as it cannot be resolved.

So I came here hoping to find some light.

Using the top command, I saw that the process that is saturating the equipment's CPU is httpd, who is this process specifically and what measures can I try to resolve it?

Thanks !



This thread was automatically locked due to age.
Parents
  • +1

    Problem solved, it is a bug in SFOS, related to WAF, where it tries to compress files that cannot be compressed, causing a lot of CPU stress, you need to select this option in the image below, in all WAF rules.



    I want to thank   immensely, he gave me the tip and helped me solve a problem that had been happening for months, in which no one from Sophos support was able to help.

Reply
  • +1

    Problem solved, it is a bug in SFOS, related to WAF, where it tries to compress files that cannot be compressed, causing a lot of CPU stress, you need to select this option in the image below, in all WAF rules.



    I want to thank   immensely, he gave me the tip and helped me solve a problem that had been happening for months, in which no one from Sophos support was able to help.

Children
  • 0 in reply to IvanildoGalvão

    Hello there,

    Thank you for sharing the solution.

    May know what is the Case ID you previously created for this issue?

    I haven't been able to confirm this is a "BUG" since a High CPU can be caused by many accumulative factors, such as a device being undersized, running several features simultaneously, etc. Also, a High CPU  isn’t in itself an issue. 

    In this case, Disable compression support might have temporarily solved the issue since this usually free some of the CPU, but again that doesn't mean that by enabling this in other Sophos Firewall would cause the CPU to increase to a 100%

    Regards,

     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support Videos | Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
Unfiltered HTML