PolicyServer service shows 100 CPU, users won't be able to connect WP
03/26/2020 3 11779
DESCRIPTION: PolicyServer service shows 100 CPU, users won't be able to connect WP
Policyserver service shows 100 CPU usage most of the time and users won't be able to connect after 1-2 days. We have reboot the device manually to connect back.
SonicWall engineering addressed ths issue with the patch along with the below CEM values.
This patch which basically ignores the client CDP's if admin chooses to and sets a CEM variable for that. till now it was trying both the CDP's from client cert as well as Admin configured.
The CEM variable which will help us in ignoring the client cert is and LDAP related errors as well.
AV_AUTH_IGNORE_CLIENT_CERT_CDP = TRUE
Steps to apply the CEM values on the appliance
1. Log in to AMC. 2. Click on Maintenance in the left-hand navigation menu. 3. In the URL, append "?advanced=1", and hit return. 4. Click on Configure under the new section Configuration extensions. 5. Click New 6. For the Key field, put in: AV_AUTH_IGNORE_CLIENT_CERT_CDP 7. For the Value field, put in: TRUE 8. Click OK. 9. Click Save, 10. Apply Changes this will force an apply-all, making the changes take effect.
Note: Until we release offical hotfix please contact Technical support and the same changes will be pushed to 10.6.4/10.7.1 as well