This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ASG220 bottlenecks and link aggregation.

I see our ASG220 (7.4) at 100% CPU load a few times a month. When that happens, I have to reboot the system and incur 10 or so minutes of downtime.

I can't even SSH into the thing to run TOP.

Is this because the 220 hardware just can't handle the 50 users?

Considering that the HTTP and POP3 proxies are running (in addition to everything else enabled; DMZs, IPS, etc.) and processing a lot of traffic daily - is the problem with our bottlenecks the HARDWARE? Daily logs show me we process anywhere from 8-12GB of traffic.

Some thoughts?

--
ALSO, is v7.5 finally capable of "bonding" multiple WAN links (3 DSL, for example) into a main network link (with QoS) ???

I remember discussing this before...

Thanks everyone.


This thread was automatically locked due to age.
Parents
  • I'd want to look at your Memory/Swap graph along with your CPU graph, but my guess would be that you got the 220 when you joined this User BB in 2006, that it has only 512MB and that the CPU is busy managing the swap file.

    V7.4's biggest advance over 7.3 was the ability to use uplink balancing with multipathing to accomplish what you want.  However, if you're already stressing your 220, then adding more work for it probably would cause more-frequent lockups.

    If you haven't yet upgraded your 220 to 1GB, then you should contact your reseller and get that going.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • I'd want to look at your Memory/Swap graph along with your CPU graph, but my guess would be that you got the 220 when you joined this User BB in 2006, that it has only 512MB and that the CPU is busy managing the swap file.

    V7.4's biggest advance over 7.3 was the ability to use uplink balancing with multipathing to accomplish what you want.  However, if you're already stressing your 220, then adding more work for it probably would cause more-frequent lockups.

    If you haven't yet upgraded your 220 to 1GB, then you should contact your reseller and get that going.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data