I don't know if this will help you, but we have had the exact same problem for a good year now. Randomly the HTTP Proxy, Postgres and SNORT would go through the roof with load averages: 10+, 10+, 10+.
We've been unable to put a finger on this, support was useless, until today! Today I just happened to be watching and was able to see one of our remote users log in using the HTML5 proxy. While they were on the resources slowly but surely went up, and up, and up some more until the units crashed (HA cluster). The resources just keep getting consumed until the entire system fails and a reboot is required. We have been living with this silliness for a damn year. We have had various Sophos support companies take a look at it, Sophos support as well and of course we have never been able to figure out. Crazy. So, maybe, just maybe if you're using the HTML5 portal, try turning that junk off and see if your stats go down.
We were able to test this in both directions
User INSIDE the network using an HTML5 portal on an ASG outside of the network.
as well as
User OUTSIDE network using HTML5 portal to access the network.
Both give the same result. Resources growing out of control over time until the units become un-usable.
I don't know if this will help you, but we have had the exact same problem for a good year now. Randomly the HTTP Proxy, Postgres and SNORT would go through the roof with load averages: 10+, 10+, 10+.
We've been unable to put a finger on this, support was useless, until today! Today I just happened to be watching and was able to see one of our remote users log in using the HTML5 proxy. While they were on the resources slowly but surely went up, and up, and up some more until the units crashed (HA cluster). The resources just keep getting consumed until the entire system fails and a reboot is required. We have been living with this silliness for a damn year. We have had various Sophos support companies take a look at it, Sophos support as well and of course we have never been able to figure out. Crazy. So, maybe, just maybe if you're using the HTML5 portal, try turning that junk off and see if your stats go down.
We were able to test this in both directions
User INSIDE the network using an HTML5 portal on an ASG outside of the network.
as well as
User OUTSIDE network using HTML5 portal to access the network.
Both give the same result. Resources growing out of control over time until the units become un-usable.
