This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos SG high CPU ctasd.bin

Hello,

We are using a Sophos SG Firewall and are struggling with high CPU utilization. ctasd.bin is causing a high CPU load on our firewall.

What could be the reason for this and what can be done about it?

This thread was automatically locked due to age.

0 Vivek Jagad 9 months ago

Hello admin_idl ,

Thank you for reaching out to the community, are there any coredumps for the ctasd under the cd /var/storage/cores/ directory ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 admin_idl 9 months ago in reply to Vivek Jagad

That is the output from cd /var/storage/cores. What should i check?
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 9 months ago in reply to admin_idl

Can you share the atop output ? - A guide to recording UTM process usage using atop.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 admin_idl 9 months ago in reply to Vivek Jagad

Do you need more information?
Cancel
Vote Up 0 Vote Down

Cancel
0 admin_idl 9 months ago in reply to admin_idl
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 9 months ago in reply to admin_idl

Here it looks good !

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 9 months ago in reply to admin_idl

Hey admin_idl , what is the impact with the high CPU usage ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 admin_idl 9 months ago in reply to Vivek Jagad

The impact was that user portal and webadmin portal login was not working. But at the moment cpu is okay.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 9 months ago in reply to admin_idl

was not working as authentication or the page was not loading ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 admin_idl 9 months ago in reply to Vivek Jagad

Authentication was not working
Cancel
Vote Up 0 Vote Down

Cancel