Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 58 replies
  • Subscribers 2 subscribers
  • Views 25282 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Astaro upgrade - slow network performance

samuel.lao85
Hi guys,

Last friday we proceeded to upgrade our ASG320 from v7 to v8. 

Does anyone have experienced slow performance since the upgrade ? 
The firmware version is 8.102, I´m waiting  6 pm to upgrade the next version until 8.300. 

Thanks...


This thread was automatically locked due to age.
  • 0 in reply to bvj
    ok....

    I deleted DMZ and let NAT interfaces configured. I also disable Exchange and frontpage because we aren´t using these apps but CPU usage doesn´t decrease.

    Should I consider a rollback  to version 7 ?
  • 0 in reply to samuel.lao85
    Attached you could see Astaro´s weekly CPU usage. 

    The slow performance started Friday 10, before that day CPU was very low.
  • 0
    v7 is going to be eol soon so stay with 8.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0
    I deleted DMZ and let NAT interfaces configured.

    Samuel, Please show a picture of the 'Local networks' box in .Intrusion Prevention'.

    bvj, how much RAM in your Astaro?  What version of Astaro software?  What NICs in the box?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0
    his 320 is 2 gigs.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0 in reply to William Warren


    100 users for a 320 on v8 is quite a bit.



    100 users for a 320 is nothing and nowhere near a limit for that appliance.  Those units are most commonly used (by the thousands) in 200-400 user environments easily.  

    However if you have customers using 320s which have 100 users showing as overloaded we should check what's wrong or misconfigured.
  • 0
    That depends on how said appliance is being used.  I can make a 1xx or even a 220 fall over here on my 5 person network with ease without having to get too fancy.   Barring a configuration problem that did not cause 7.5x issues and given what i've seen with 8.x in the past and projecting(based on previous performances with astaro software)I'm standing by my statements there.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0 in reply to samuel.lao85
    I deleted DMZ and let NAT interfaces configured.


    No, you should keep DMZ and remove all the interfaces (from 'Local networks' in the IPS settings).

    Barry
  • 0 in reply to samuel.lao85
    ok....

    I deleted DMZ and let NAT interfaces configured. I also disable Exchange and frontpage because we aren´t using these apps but CPU usage doesn´t decrease.

    Should I consider a rollback  to version 7 ?


    no on v7 and only put in the dmz interface.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0
    Hi guys,

    Well, for now I deactivated IPS service from Astaro.

    The last I did was configure DMZ  as BAlfson suggested. It seems that networks configured on IPS aren´t causing this problem, I removed DMZ and configured another network and CPU increase its usage.

    Thanks for your help guys, thank you for your time. I really appreciate your answers looking for a solution here...
Cookie Information Banner