Overview

While experiencing performance issues, such as hanging/stalling, on NG100 boxes, the users cannot access the Internet. The connection is being dropped and Webadmin console becomes inaccessible.

While reviewing System Health, the RAM and CPU usage is reported as 0%. This behavior is usually observed during Antivirus database updates.

This article provides details about the hardware performance during AV update checks.

Information

While investigating this issue in 2 different Development labs, it was not replicated. The CPU spikes up (up to 50%), the RAM usage increases a bit. CPU and RAM values are returning back to the original low values, once the update is finished.

The timestamp of AV database updates from the Security logs matches the System Health resource report.

  [03/Dec/2020 00:28:05] Antivirus update: Kerio Antivirus database has been successfully updated. Kerio Antivirus engine version/Signature count:(AVCORE v2.1 Linux/x86_64 11.0.1.19 (January 14, 2020)/12133771) is now active.

  [03/Dec/2020 08:30:07] Antivirus update: Kerio Antivirus database has been successfully updated. Kerio Antivirus engine version/Signature count:(AVCORE v2.1 Linux/x86_64 11.0.1.19 (January 14, 2020)/12129753) is now active.

  [03/Dec/2020 16:29:13] Antivirus update: Kerio Antivirus database has been successfully updated. Kerio Antivirus engine version/Signature count:(AVCORE v2.1 Linux/x86_64 11.0.1.19 (January 14, 2020)/12125711) is now active.

2-hours results

1-day report

1-week results

It happens due to extensive software and hardware resource usage during Antivirus updates. Consuming more CPU/RAM during AV update is considered as expected product and hardware behavior.

If you face complete CPU/RAM exhaustion (0% or 100% usage), it might be the case of overuse or hardware failure. Please refer to the articles below for more information.

1. Overuse: Considering the Effect of Concurrent Maximum Users for Maximum Performance on Kerio Control
2. Hardware failure: Diagnosing Faulty hardware boxes