Sophos UTM - High CPU Usage

Hi and welcome to the UTM Community!

How about pictures of the Daily and Weekly CPU and Memory Usage from 'Logging & Reporting'?

Cheers - Bob

Here are the historic graph. We can see that CPU usage really picked up from 17th July. I have looked into change register and couldn't find any change that could have potentially resulted it.

Some Month ago i had similar problem with firefox how want's to get internet connection but it was not possible because on our site you need to autorised before you get Internet acccess.

So in this case firefox is polling many time a second to get internet connection.

Myby you find some information it the Webproxy log?

If you look at top on the command line, which COMMAND has the highest %CPU?

Cheers - Bob

I pasted process CPU utilization in my first post. its p0f and httpproxy

Yesterday I disabled web filtering for 2 minutes, CPU usage dropped from 90%+ to around 30%. After re-enabling filtering its hovering around 30% mark since past 16 hours.

I have observed that p0f process usage went from 50%+ to around 1-2%. Any good reason?

Did you look in the Web Filtering log as Remo suggests above?  We learned here two years ago that the Proxy uses p0f to identify the OS the client is using for device-specific authentication.  Are you doing that?  If you're using Firefox, do you see the same phenomenon with a different browser?

Cheers - Bob

Did you look in the Web Filtering log as Remo suggests above?  We learned here two years ago that the Proxy uses p0f to identify the OS the client is using for device-specific authentication.  Are you doing that?  If you're using Firefox, do you see the same phenomenon with a different browser?

Cheers - Bob