Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 8 replies
  • Subscribers 28 subscribers
  • Views 1297 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG in VMWare report partition filling up about every two weeks

Robert Russom

I've got all the log retention modules at their minimum of either one or three months and most unneeded syslogging unchecked, but it seems like the report partition goes over 80% about every two weeks and all my reports stop until I purge the data. Coming from a WSA where I could pull user data for the year if needed, only having one to three months of available user data is a step backwards.

 Most of what I find when searching about partition size is about the UTM, and it seems changing disk size isn't recommended, although I have no idea whether increasing the disk size would affect the reporting partition. At any rate, if I'm having to purge data every few weeks with the 80g disk, just how big would it have to be for me to have a year's worth of reporting data available. I do have an unlimited license.

 Any options, or at 1300+ users have I reached a limit of what the XG can do? All I really need is user web traffic.

 Thanks



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to rfcat_vk

    Thanks again, Ian.

    >"XG does not keep history very well, it is an ongoing complaint in these forums." Man, that makes me miss the WSAs more and more. Too bad there's apparently no new development going into them. I'm not finding the XG a suitable proxy replacement, especially considering the WSAs ruled for reporting and classifying traffic.

     

    Not wanting to get too OT, but

    >"The longest part of a fresh installation will be the formatting of the disk."

    I should just be able to backup my existing, turn up a new, properly-sized XG appliance in VMWare, then restore my backup to it, correct?

  • +1 in reply to Robert Russom

    Actually the XG should be able to report and classify more traffic than WSA. 

    I would assume, you are decrypting Traffic? Wait for XGv18 with SSLx. This is the next level. 

     

    And yes, you can setup a new XG and import your backup.

    But be careful. There can be only one serial number active at the same  time. 

    So skip the registration for 30 Days, import your backup, schedule a downtime, disable your old XG, register the new XG with the same serial and move on.

    Or use License Transfer: https://community.sophos.com/kb/en-us/126360

    Basically register the new XG with a 30 Day Trial, import Backup etc.

    Than move the old subscription to the new Serial. 

     

  • 0 in reply to LuCar Toni

    Thanks, I've done the License Transfer before, so that's probably how I'd do it.

    I'll keep my fingers crossed for v18, then.