SOPHOS XG Fw - How to Clear SWAP Cache?.

Hello Enzo,

Why would you like to remove the swap cache? If your concern is regarding Web Cache, then we have a toggle to disable the cache under web> general settings.

Hello Adytia, 

The situation of cleaning the swap cache is due to the fact that our firewall is currently using  95 to 98% RAM and SWAP and it has generated  faults in the operation of the virtual appliance.

Here is an image of the swap resources used:

a few days ago, we disabled IPS, Antivirus, Hotspot and Web Server protection Services, but there were no changes, and this shows me too much postgres processes that i known it used by snort.

Waiting for your early reply.

Adytia, 

Adding this, the IPS service and other too, here's the output of the System service status:

That's my doubts are generated related to the utilization resources, because they were disabled.

Waiting for your early reply.

Thanks for all help!

Best Regards

Hello Enzo,

It does seem that some process is causing high utilization on your SWAP memory, could you please check go to atop and press S and check which process is taking the most of the cpu and also check by pressing p and check at that time which process is taking high swap memory. 

We suspect the issue could be with one of these process, also could you please let us know if you are on the latest version?

Aditya,

Here's the ouput from atop 

The current firmware versión is 17.1.4-MR4, applied about 3 weeks ago.

Hello,

Any helps with this?, it really worries me, because this can cause abnormal operations...

Waiting for replys.

Best Regards.

Hello Enzo, 

We have received your case and would monitor this issue further. 

Additya,

Hello Enzo,

Thank you for the update, as your case is still ongoing I would advise to wait until we reach the conclusion to this issue.

Ok Aditya, iĺl be waiting for your reply about this case.

Thanks.

Regards!

Hello Enzo, 

Thank you for dedicating your time and effort to diagnose this issue with our support team, we suspect to be a bug but would like you to continue troubleshooting with our engineer.. 

Ref:NC-34479

Aditya, 

Yes, maybe a but, can you continue investigating this case?, it would be very helpfull to know this device behavior. In parallel we will perform the rebuild of the device with the last version.

Best Regards!

Aditya, 

Yes, maybe a but, can you continue investigating this case?, it would be very helpfull to know this device behavior. In parallel we will perform the rebuild of the device with the last version.

Best Regards!

Hello Enzo,

Thank you for the update, rebuild should be the only solution for now. Do not restore the backup, simply configure the device again from scratch.

Hello Aditya,

At the moment, we're doing a new device deployment with new configuration, but is necessary that your team perform the analisys about this anomaly and the usage resources in the virtual enviroment this, because we have another customer with many more systems and the resources of the other firewall (different manufacturer) does not use as many resources in its virtual implementation.

Waiting for your early reply.

Best regards.