Hi, we are running two McAfee Webgateways in a cluster (Version 188.8.131.52.0). Since yesterday I see a lot of requests per second on one of them, the other one has about 40, which is normal and the first one 829, which is not normal and keeps rising. Attached you can see the output from "Top"-command, so the mwg-core process is using about "230%" CPU. Do you have an idea what could cause the problem or which logs I should check? I checked all log files available on the UI, but everything looks normal.
Moved from Security Awareness to Business / Email and Web Security / Web Gateway
Perhaps a proxy loop? Are you removing the via header?
230 % is relative to the number of cores on your system. So if you have 8 cores on the system, then MWG can use up to 800%.
Hi, thanks for your advice! I looked up the access logs and found one IP that kept sending http requests to a nokia domain. It was Nokia Suite that tried to connect to its downloading center-because authentification failed, it just kept requesting the site... when I asked the user to reboot his notebook, the sessions went from about 830 to 50 in a second! So the application caused the high load.
Thanks again for your help.
Message was edited by: renata.petrasova on 6/23/13 3:21:44 AM CDT