Solved: Virtual Defence Center memory consumption

Michael Bartholomæussen · ‎04-21-2017

Hi

Our virtual defence center is consuming 2.5 gb out of 8 gb ram, and our sec. consultant (CCIE guy) says that it should be able to use all the memory, all the time, like an SQL server?

He believes that our VMware enviroment is causing the problem?

Is this true or is this the default behaivor for the defence center?

Regards,

Michael

Marvin Rhoads · ‎04-21-2017

FirePOWER Management Center (new name since version 6.0) uses memory dynamically depending on many factors.

It's not like SQL Server in its memory consumption as it uses a couple of databases (SAP SQL Anywhere and MySQL) under the covers.

Cisco still has work to do in making it more scalable by addition of memory. I've heard that may be in the works for future releases as they move more processes onto the SAP database. Right now 16 GB is supported but adding anything beyond the required 8 GB results in very little (if any) improvement in system performance (either event ingestion or management GUI responsiveness).

View solution in original post

Marvin Rhoads · ‎04-21-2017

FirePOWER Management Center (new name since version 6.0) uses memory dynamically depending on many factors.

It's not like SQL Server in its memory consumption as it uses a couple of databases (SAP SQL Anywhere and MySQL) under the covers.

Cisco still has work to do in making it more scalable by addition of memory. I've heard that may be in the works for future releases as they move more processes onto the SAP database. Right now 16 GB is supported but adding anything beyond the required 8 GB results in very little (if any) improvement in system performance (either event ingestion or management GUI responsiveness).

Michael Bartholomæussen · ‎04-21-2017

Thanks for the reply.

Is there anyway to adjust defence center so that the GUI will performe better?

Marvin Rhoads · ‎04-21-2017

There's some client side work done rendering the HTML. But assuming you have a non-constrained client there's unfortunately no supported way to make the virtual FirePOWER Management Center user interface faster.

One of my associates went in and tweaked some db parameters with some small improvement at loading tables like connection events. However that is unsupported as it is very easy to break things and make the system unrecoverable.