- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
High 90-95 memory utilization on 10.7.1 with few logged in users.
03/26/2020 
5 People found this article helpful
31,634 Views
Description
High 90-95 memory utilization on 10.7.1 with few logged in users.
Resolution
Applies to:
Product: SRA EX6000/EX7000/EX9000 BASE APPLIANCE
Firmware Version: 10.7.1-237
Problem Description:
Standalone appliance is running firmware version 10.7.1 and experiencing high memory utilization with very few users logged in. The process that is showing high memory use is MariaDB utilizing 30-40. Issue with High memory utilization noticed post upgrade to 10.7.1 + HF-449 however the issue persists. High memory affects resource access and users may be disconnected.
Resolution/Workaround:
There is a limitation on how web-proxy agents can be used and is independent of user count. It is not designed for heavy traffic and long persistent connections. Persistent connections maintain child processes within system memory. Issues may be experienced with very few connected users who have maintained persistent connections for lengthy periods of time.
Too many persistent processes will cause the system to use swap space instead of physical memory which will in turn further affect system stability and responsiveness. We recommended using Connect Tunnel Client or OnDemand Tunnel instead of Web Proxy or OnDemand Proxy in such cases. With Connect Tunnel Client or OnDemand Tunnel the problem should not occur.
The Web Proxy and OnDemand Proxy access methods were never designed to be used with persistent Citrix or VDI sessions. Web Proxy and OnDemand Proxy were designed to provide access to web applications.
Engineering & Support always recommend to use Connect Tunnel Client or OnDemand Tunnel access for better performance instead proxy agents.
Tracking ID DTS# 154492
Related Articles
- Initial Setup Guide of SMA1000 for high security environments
- How can I get root access to SMA100
- SMB SSL-VPN: User principal name (UPN) support on SMB SSL VPN devices
YES
NO