Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 89 replies
  • Subscribers 4 subscribers
  • Views 84222 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Memory swap usage 9.1GA and UTM220

Simon Shaw
We have a UTM220 device, upgraded to 9.1 yesterday.

40 devices/users protected.
Network Visibility, POP3 Proxy, RED, Endpoint Protection, WAF and HA are all OFF.
HTTP Proxy web caching is off.
IPS is using only 7980 of 15806 patterns.

75-300 users are recommended by Sophos for this unit type.

However memory swap climbed almost instantly to over 50% of RAM.  I know there has been some discussion on swap usage, but am unsure of the outcome.  CPU looks fine.

Memory.png

Can someone send me a summary of Sophos comments on swap/memory usage as I'd really not like to throw 100-200 users on this device...


This thread was automatically locked due to age.
  • 0
    It's ot a hardware thing....it's the needs of the software..[:)]

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0
    Previously, with 2GB after rebooting, had high intake swap.
    Upon reboot with 4GB, swap usage remains at 0%.

    The memory consumption low on Thursday and Friday because I disabled some services (IPS, FTP Proxy, Anti Virus Scan, and Managament SUM). But after upgrading to 4GB everything was enabled again.
  • 0
    Hi ,

    I still can not understand why there are still UTM with 2Gb , it's not enough if all modules are enable , that's why the upgrade to 4 have you such results.
    When there are only 2 Gb then swap will work hard.
    One thing is sure , with 2Gb of RAM I would never think of using local content filter DB in RAM no Mather what.
    Try to upgrade RAM in this one too.

    All my best.

    Gil Peled.

    CEO- Expert2IT LTD.

    SOPHOS Platinum Partner.

    Gil@expert2it.co.Il.

  • 0 in reply to gilipeled
    I have asked for the UTM 220 to be upgraded to 4gb of RAM in the feature request section - please vote [:)]

    4GB RAM for UTM 220
  • 0
    actually it should be 4 gigs ram minimum..1xx 4 gigs..2xx 6 3xx 8 and so on.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0
    OK, I thought that the swap-growth issue had been fixed in 9.006-5, but it hasn't, only mostly, not completely.  Sophos, until this issue is fixed, appliances need to have a minimum of 4GB of RAM.

    I agree that 2GB is the right amount if swap works correctly, but there is an issue with every one of my customers on V9.006-5.  Even the one with a 7GB software install grew gradually from 0.00 to 0.32 over a 4-day period.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0
    Do any of your clients run 9.1?

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0
    My Yes, and where the swap consumption is high, the performance for Proxy is relatively low ... after the increment to 4 GB I saw proxy speed increase at least 10 x.
  • 0
    So far so good! But Sophos should not consider the loss of warranty with 4GB for UTM220 if the equipment does not work well with just 2GB, depending on the features that are active.
  • 0
    Hi, William,

    Yes.  Six still are on 9.006-5, and four more on V9 upgraded to 9.1.  Of those four (all growths are gradual):
    • 220v5 - After the 9.1 Up2Date, grew from zero over five days to about 50% and stays near there.  Under 9.006-5, it would grow to 75-100% within a week or so.
    • Software 8GB - After the 9.1 Up2Date, swap stayed at zero for 1.5 days and then grew to 4.7% over the next three days.  After the 9.006-5 Up2Date, swap grew from 0 to 13% in 33 days.
    • 120v5 - After the 9.1 Up2Date, swap grew to 46% in a little more than six days and is now nearly 60%.  Under 9.006-5, swap grew to 100% in fifteen days.
    • Software 6GB - After the 9.1 Up2Date, swap remained at zero for 1.5 days and then grew to 9.7% over the next ten days.  After the 9.006-5 Up2Date, swap stayed at zero for two days, and then grew to 13% over the next ten days until 9.1.


    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Unfiltered HTML