Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

SFOS 21 Third-party threat feed limits

What's the limiting factor on the third party threat feeds?  I current have 617,819 total IOC's in a v21 system running on a VM (software) and when trying to load another list here: https://raw.githubusercontent.com/hagezi/dns-blocklists/main/domains/tif.txt  it tells me the storage is full.   

Is there any way to increase this?  

Parents
  • SFOS uses the RAM to slice enough storage for the Third Party feed. 

    Does your system not have enough memory? By using only 4 GB RAM; we will not have enough memory to allocate enough space for many IoCs here. (Keep in mind, Sophos Labs / xops is also in the same space and need storage). 

    __________________________________________________________________________________________________________________

  • I received the same message today. (while trying to integrate the same feed)
    I then increased the memory from 4.3 GB to 6 GB. This did not bring any change. Still the same message.
    Current memory usage 50% of 6GB


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

Reply
  • I received the same message today. (while trying to integrate the same feed)
    I then increased the memory from 4.3 GB to 6 GB. This did not bring any change. Still the same message.
    Current memory usage 50% of 6GB


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

Children
No Data