Performance Monitor Always Orange, Y?

Thanks for the question. I believe you are referring to Flat View under Device Monitor. You can change the threshold values for parameters shown on Flat view by clicking Adjust Thresholds.

Thank you for getting back to me. I am talking the performance monitor on the page where all the other monitors are, The other 3 are green and the performance is orange. I don't see where I can Adjust Threshhold?

Thanks. Can you share a screen for reference to help understand.

Thanks for getting back to me. I cant share a screen sorry. What I am talking about is when you login to XG and click "Network Security Control Center" That page show the performance monitor and its orange all the time not green like the services, VPN & connections. When I bring up the help file it says for orange "Warning
Load Average is between 2 to 5 units." What does this mean and Y is it not green instead of orange?

ok, you are referring to XG Firewall and not Sophos Firewall Manager. Let me move this post to XG Firewall forum

JoseCasanova,
Thanks you very much for providing the screen shot. I am a bit confused to the response I got from SanketHanda. Looking at the top of this page its says I am in the Sophos XG Firewall community so what gives here?

A lot of people reporting the same thing, I don't believe there's a way of changing this (at least that I've found). My load average hasn't gone above 2.38 and it's always orange.

May be a bug in this release.

Hi folks,
what you aren't saying is what your hardware is and how many rules you have configured.
I would expect if you are using a dual core atom or something similar you will have a high standing load.
Mine is running a dual core i3-3220t 2.8ghz with 4 policies and sits around 1.44. External interface will also affect your base load, mine is on a good day 5mb/s.

Ian

I have Sophos XG installed in a vm, The hardware is a Intel Xeon E3-1231 v3 @3.40 GHz with 16GB of ECC Samsung memory. I have allocated 2 cores and 6GB of memory for Sophos XG. I have 5 Rules setup and the performance monitor shows orange.

Thanks for taking the time...

I tested it in hyper-v with 2 cores and 4gb ram. My icon turned yellow during startup but turned back to green after a little while. My system load stayed close to 1.x. I noticed that the virtual memory allocation driver had problems. Type
dmesg
on console. Are you getting errors like
hv_balloon : memory hot add failed
If so, you will have to allocate fixed amount of memory instead of using dynamic memory allocation.

If using esxi, try allocating a fixed amount of memory and see if it helps. If you already have a fixed amount of memory allocated then sophos will have to fix it in the next release.

A lot of people have had similar problems like https://community.sophos.com/products/xg-firewall/f/46/t/35030 but that guy was using bare metal. What Ian said above would be applicable in that case. But still, most modern hardware shouldn't be struggling to run this thing at home.

Thank you for taking the time to reply. I am using Hyper-v and the configuration I posted above and I always have orange in the performance monitor, Any idea what could be cousin my trouble?

Thank you for taking the time to reply. I am using Hyper-v and the configuration I posted above and I always have orange in the performance monitor, Any idea what could be cousin my trouble?

1. Shutdown the firewall.

2. Go to Hyper-v manager and click on settings for XG vm.

3. Click on memory and make sure use dynamic memory is unchecked.

4. Change startup memory to 4GB or more depending on how much you can spare. (I successfully ran XG with 2GB of ram during beta with only 2 clients)[:P]

5. Do not go below 2GB memory although sophos says 1GB in minimum system requirements.[:#]

6. For even better performance, allocate fixed disk size around 40GB and don't use dynamically expanding disks. You can use a bigger disk if you like. Sofos vm install is 80GB if you download the vm installer.

billybob,
Thanks for taking the to to respond. I don't use Dynamic Memory and I have 6GB allocated to Sophos XG I also gave the vm 60GB and I don't use dynamically expanding and my performance monitor is ALWAYS orange, Any other idea whats going on? Many people are reporting this with no signs of what is cousin it. Heck Sophos own screen shot in the post below shows the performance monitor "orange" What gives?
blogs.sophos.com/.../

Hello all, I don't know that its necessarily a resource issue, I truly believe its a bug. I have 2 actual appliances I've upgrade to XG. One is a SG310 (Which according to the sizing guide should be the right appliance for around 250 users), and there are 11 users in that network, has been orange since day 1.

The other is an SG135 (Which according to the sizing guide should handle around 45 users) and there are 7 users in that network and has always been orange.

So both appliances are BEYOND overkill yet the performance monitor is always orange. I should note that all other resources are fine (i.e CPU runs between 1% to 3% steady). Overall I think this issue should be addressed in the next Firmware release.

Thanks

Ray, at this point, your guess is as good as mine. Funny you mention the sophos blog. I noticed that when they first released XG. In any case, sophos will have to address this along with a host of other things that I mentioned here community.sophos.com/.../33060

If you rely on any of that stuff, sooner or later you will run into problems because its either not working or in half working condition. For now, I would stick with the UTM for home use as most of us are and hope that they get some of this sorted out in the next couple of releases before UTM starts getting phased out. Lets hope the software quality in the UTM doesn't suffer community.sophos.com/.../73207 while sophos is focusing all its resources on XG.

DMR188,
Thank you for taking the time to share. I think I am with you, It has to be a bug because even a screen shot that Sophos shows orange and all other monitors green.

Billybob, Thanks for taking the time and for the links. We can only hope the next update due in Jan-Feb addresses lots of things. I will stick with XG for now because even though its in a crippled state it works & the performance seems much better. As you said UTM9.x is only on borrowed time so I don't want to go back to it. From here if things don't get drastically fixed sooner then later then I guess I will have no choice but to look elsewhere for my firewall needs.