Why awarrenthttp process is using 99% CPU and the Internet access is very slow with XG 450 over 1Gb/s link ?

Hi, 

Please provide me the case ID, active with the support, I will personally monitor the activities on the case. 

Thanks

We are on the latest firmware XG450 (SFOS 16.05.5 MR-5) and the awarrenhttp process is still using lots of CPU and the Internet access is slow or unresponsive at peak times.

Switching off IPS and Application logging helps a little bit. The screenshot was taken with 550 concurrent users.

 .

Stab in the dark, review packet size on the external interface.

lukg, I assume that you have done as has been advised and talked to support and tried to get them to escalate.  Do you have a ticket number?

There is almost nothing that sophos can do about this in the forums, and I doubt the general community can help much.  You need to get a sophos engineer to look at your box.

The case has been escalated for a while now but unfortunately subsequent fixes has not resolved the problem yet.

Our appliance was upgraded from XG450 to XG550 and so far CPU usage has been low.

Lukg,

so I guess even with HW upgrade, the issue still persists.

XG550 should be for than enough for your installation.

Thanks

Lukg,

so I guess even with HW upgrade, the issue still persists.

XG550 should be for than enough for your installation.

Thanks

Still sometimes the web browsing slows down for about 10-30 sec and always some of the CPU cores are used 100% with overall appliance utilization quite low. Sophos Support was interested in the overall utilization and the case get closed. I think the bug still exists but more cores in XG550 limits this issue for us.   

Support reply:

I have gone through the attachments. There are 32 CPU cores in the appliance. It is expected that, resources will be utilized when we have more than 650 users online and, accessing internet through firewall.

Overall CPU utilization should not exceed 80-90%. Please update us, if you notice spike in overall CPU utilization.