I think that the usage is too high, look at the attachmet, this is a virtual appliance on an ML350 G5, there's no internal or outside traffic (only an ap5 and a RED remotelly connected); this usage is only activating lot of function.
I think that the usage is too high, look at the attachmet, this is a virtual appliance on an ML350 G5, there's no internal or outside traffic (only an ap5 and a RED remotelly connected); this usage is only activating lot of function.
Hi, the traffic going through the machine is not the only thing that needs ressources. You enabled a bunch of features which is memory intensive. First each software itself needs an amount of ressources and in addition to that the filters like AV/IPS need to hold rules in memory.
IPS needs a lot of memory for the rules depending on your (virtual) hardware. I would expect one or two running instances of snort in your case
HTTP(s) Proxy with enabled AV/AntiSpyware engines need a lot of memory
Network Visibility also needs memory
SMTP Proxy with enabled AV/AntiSpam both filters need memory
Remote Access
EndPoint
and Wireless
You may enable all these components but I would recommend much more memory for such a situation (about 4GB or 8GB).
Btw, I have a similar setup running on an UTM120 with 2GB RAM which is currectly used to ~65% (after >15GB traffic today).
You don't have enough memory for the service enabled. 55% Swap File usage is bad as well. It means your writing to disk instead of memory and for Linux that basically means your don't have enough memory. Up your RAM to 3GB or 4GB and you should be fine. All of my software and virtual appliances sit at 0% Swap Used and perform great. The Sophos UTM Appliances, not so much. Sophos still has them under powered for what they do and the size recommended.
just come back from the other post, i don't think that adding more RAM to the VMachine will solve the problem, this is not the solution, actually I've many GB of RAM ready to use but i won't.
Starting from the low entry appliance UTM110/120 we can use 2GB of RAM and I expect to use all the feature also on this appliance, otherwise I'll aspect a Sophos Paper that tell me that I can't.
I've disable many the features but the results is the same, 2GB full with no traffic internal->outside and viceversa, there's only two remote clients with Endpoint Protection, i think this is not the best performance that Astaro/Sophos can do, have a nice job to solve this! [:)]
utm9 is very hoggish on ram. As i have posted before the real minimum for ram on utm 9 is 3 gigs. if you are running a low end appliance you CAN run all the features in 2 gigs but you are going to swap.
