This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

System "heaviness"

Avi Bar Ilan over 6 years ago

Hi Guys

i am currently using 2 xg firewall - both are virtual machines on esxi hosts.

both vm have 2 cpu and 4gb of ram.

i have a lot of experience working with firewall

(forigates, checkpoints, pfsense, etc)

my recent migration to xg is successful but the most "noticeable" difference i can point is:

the general heaviness, sluggishness and overall slowness of the system.

am i not givving the VM's enough resources?

or is the system heavy by design?

This thread was automatically locked due to age.

Parents

0 LuCar Toni over 6 years ago

What do you mean with slowness?

The GUI?
Cancel
Vote Up 0 Vote Down

Cancel
0 Avi Bar Ilan over 6 years ago in reply to LuCar Toni

Hi

yes, exactly. the GUI is sluggish and heavy at least for me
Cancel
Vote Up 0 Vote Down

Cancel
0 Badrobot over 6 years ago in reply to Avi Bar Ilan

Have you tried bumping up the resources of the VM, maybe shut one firewall off and bump the other up to see if this increases the GUI speed just as a test to narrow down if it is hardware? Also is your ESXi using platter or SSD, I know the hardware versions of the XG utilize SSD which can greatly increase performance.

Aside from hardware what security aspects are you using? IPS, Web Content? HTTP and or HTTPS scanning? Do you have all the IPS aspects enabled, are there some you can disable given the systems you are protecting?
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 6 years ago in reply to Badrobot

Hi,

what version of XG are you running some of the later versions have improved throughput. Also how much ram is the XG using and how full are your disks specifically the swap space?

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 6 years ago in reply to rfcat_vk

It depends on the Operation, you currently use.

If you browser through the GUI, it should be fast.

If you change for example a firewall policy, it could be "slow" in terms of the XG has to rerun all Policies etc.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 6 years ago in reply to LuCar Toni

Hi,

the XG GUI is slow compared to say the UTM.

I have found my XG GUI improves with a restart after being up for 13 days. As LuCar advised inter GUI moves to review settings is relatively quick.

With VMs have you locked memory and CPU cycles to the XG exclusively?

In one of the more recent MRs there was a noticeable performance improvement.

Ian
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 rfcat_vk over 6 years ago in reply to LuCar Toni

Hi,

the XG GUI is slow compared to say the UTM.

I have found my XG GUI improves with a restart after being up for 13 days. As LuCar advised inter GUI moves to review settings is relatively quick.

With VMs have you locked memory and CPU cycles to the XG exclusively?

In one of the more recent MRs there was a noticeable performance improvement.

Ian
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Avi Bar Ilan over 6 years ago in reply to rfcat_vk

Hi

let me try to clearify:

firstly, i have the VM running on an SSD, 2 cpu and 4gb ram.

i had a forti vm and a pfsense running on the same datastore, same cpu and ram count and both forti and pfsense gui were running and performing much faster.

also, running the same load, forti and pfsense were showing average ram usage of 20% while xg is running at no less than 40%

on login, both forti and pfsense loaded the web ui in about 1-2 seconds while xg loads after about 5-6 seconds.

switching between pages was instantaneous on forti and pfsense while on xg there is a few seconds delay until pages load

(clicking on the "firewall" or Vpn" link on the gui)
Cancel
Vote Up 0 Vote Down

Cancel