Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 2 subscribers
  • Views 1220 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Memory Dumps Causing Web Access Interruption

UweT
Dear Experts

2-3 times a month we are facing "Internet outtages" for 5-10min on a day. During this time all users who are using the proxy (web filter) cannot access any web service during that time. 

We have noticed that the only according event that takes place during that time is a memory dump on the UTM (Release 9.111-7). If you see the screenshots you notice that that happens every day but within times when there is no school or productive work. Sometime these "dumps" take place at 8am or 10am or 2pm. That's where it gets frustrating.

Can someone explain this behavior or does anyone know how we could "schedule" this memory dump (i.e. every night). 

Looking at the graphs I can also see a high increase in swap memory since last week. But that is another topic.

Thank you in advance!
Uwe


This thread was automatically locked due to age.
  • 0
    Do you have a support ticket opened?  What is the hardware you are using?  How many users?  Which features are on? How many wan connections and what are the speeds?

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0
    Absolutely get a support case opened with Sophos, directly or via your support provider, if you don't have one already.  Support may wish to remotely access the UTM to see the core dumps and logs - having that "ready to go" (configured but disabled) is a good idea if permissible in your environment.

    The proxy could be restarted manually, via WebAdmin (disable & enable) or the command line, or automatically via a cron job during less critical hours.

    The command line and cron job methods are subject to Support's blessing (if they don't like what you've done, or suspect your problem is from command line meddling they claim they can insist on a rebuild of the UTM before significant efforts will be made to resolve the problem).
  • 0 in reply to teched_01
    You need to open a support case with Sophos.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0
    Okay I will do that. Thank you very much for your help!
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?