Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 12 replies
  • Subscribers 9 subscribers
  • Views 2288 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SG125 higher than normal CPU usage since upgrading to 9.713-19

SEFIT

Hi there, since upgrading to 9.713-19 it appears that one of our smaller UTM's, an SG125, has begun exhibiting higher than normal CPU usage.

CPU usage comes in spikes, while memory is constantly above 60%

SUM 4 monitor also has a warning that "projected load average trend shows major increase of 75%"

Shortly afterwards we noticed that the office using this UTM began struggling with internet connectivity due to packet losses.

We've engaged with the ISP and the line seems to be OK, so this leads me to suspect that the UTM is to blame.

What strikes me as odd is that the UTM isn't very busy, i.e. there's barely anyone in the office, and it has been fine with a full office several times a month.

Is there any way to determine whether a recently updated component is causing this? I've disabled IPS, QoS and Port Scan detection. WAF is not used, nor is email protection.

I'm at a loss and would appreciate any guidance. Thanks.

Kind regards,

Byron.



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to SEFIT

    Does a reboot get the system to settle down?

    Cheers - Bob

  • 0 in reply to BAlfson

    Hi Bob,

    It turns out that the UTM is not at fault for our packet loss situation, but rather a faulty switch that has been tricky to isolate.

    While the UTM does exhibit higher load levels than previously, this does not seem to be causing any major issues.

    Rebooting the UTM only seems to provide temporary improvement.

    I also noted the following two processes with high CPU utilisation popping up every once and a while:

    create_rdd_grap
    rddtool

    Kind regards,

    Byron