This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

System "heaviness"

Hi Guys

i am currently using 2 xg firewall - both are virtual machines on esxi hosts.

both vm have 2 cpu and 4gb of ram.

i have a lot of experience working with firewall

(forigates, checkpoints, pfsense, etc)

my recent migration to xg is successful but the most "noticeable" difference i can point is:

the general heaviness, sluggishness and overall slowness of the system.

 

am i not givving the VM's enough resources?

or is the system heavy by design?

 



This thread was automatically locked due to age.
  • What do you mean with slowness? 

    The GUI? 

  • Hi

    yes, exactly. the GUI is sluggish and heavy at least for me 

  • Have you tried bumping up the resources of the VM, maybe shut one firewall off and bump the other up to see if this increases the GUI speed just as a test to narrow down if it is hardware?  Also is your ESXi using platter or SSD, I know the hardware versions of the XG utilize SSD which can greatly increase performance.

     

    Aside from hardware what security aspects are you using?  IPS, Web Content?  HTTP and or HTTPS scanning?  Do you have all the IPS aspects enabled, are there some you can disable given the systems you are protecting?  

  • Hi,

    what version of XG are you running some of the later versions have improved throughput. Also how much ram is the XG using and how full are your disks specifically the swap space?

    Ian

  • It depends on the Operation, you currently use.

    If you browser through the GUI, it should be fast.

    If you change for example a firewall policy, it could be "slow" in terms of the XG has to rerun all Policies etc. 

  • Hi,

    the XG GUI is slow compared to say the UTM.

    I have found my XG GUI improves with a restart after being up for 13 days. As LuCar advised inter GUI moves to review settings is relatively quick. 

    With VMs have you locked memory and CPU cycles to the XG exclusively?

    In one of the more recent MRs there was a noticeable performance improvement.

    Ian

  • Hi

    let me try to clearify:

    firstly, i have the VM running on an SSD, 2 cpu and 4gb ram.

    i had a forti vm and a pfsense running on the same datastore, same cpu and ram count and both forti and pfsense gui were running and performing much faster.

    also, running the same load, forti and pfsense were showing average ram usage of 20% while xg is running at no less than 40%

    on login, both forti and pfsense loaded the web ui in about 1-2 seconds while xg loads after about 5-6 seconds.

    switching between pages was instantaneous on forti and pfsense while on xg there is a few seconds delay until pages load

    (clicking on the "firewall" or Vpn" link on the gui) 

  • Emrick Jack said:

    Hi Guys

    i am currently using 2 xg firewall - both are virtual machines on ESXi hosts.

    both VM has 2 cpu and 4gb of ram.

    i have a lot of experience working with firewall

    (frigates, checkpoints, pfsense, etc)

    my recent migration to xg is successful but the most "noticeable" difference i can point is:

    the general heaviness, sluggishness and overall slowness of the system.

     

    am I not giving the VM's enough resources?

    or is the system heavy by design?

     

    I Really Like This Post Very Helpfull Post I Sguetsoin My Friends on This Site

  • HI,

    you will not get any real arguments about the XG GUI speed, it has been discussed at length and is caused by the amount of data it loads/sends (quoting from an earlier thread somewhere in the order of 2MB). V18 is promising to provide a leaner and faster GUI.

    I am not sure what you are comparing between the various firewalls that you quoted as to functions in the configuration. Also memory should not be an issue, memory is cheap, the limit being 6gb for a home user licence.

    Ian

  • Hi

    you have actually answered my question. sort of

    i wanted to know if the "heaviness" an issue on my side or is caused by design.

    so now, i understand thats "its not just me" it is heavy and sluggish by design (or design flaw)

     

    but sadly,

    i understand that there is nothing i can do to improve it other than to wait to version 18