Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Performance Issues

This thread has been viewed 12 times
  • 1.  Performance Issues

    Posted Sep 19, 2017 06:22 AM

    Hi

     

    I am having slowdown on the clearpass GUI and high CPU warnings periodically.  Running as 2x 5K version on a cluster on windows Hyper V.  Clicking on an access tracker entry can sometimes take a few minutes.

     

    Whereas it used to be quite fast although there is a lot more activity on our network now.

     

    How can I start to work out what is the cause and how to resolve it?

     

    I set them up with the resources the Hyper V document stated.

     

    Thanks for any help



  • 2.  RE: Performance Issues

    Posted Sep 19, 2017 10:00 AM

    Been looking into it, in more detail.  

     

    It seems not to be CPU usage but High I/O wait when accessing the GUI and data in the database:

     

    CPPM[clp02] System(CPU): High I/O wait(10 min avg) - 18

     

    The CPU usage isn't high.



  • 3.  RE: Performance Issues

    EMPLOYEE
    Posted Sep 20, 2017 03:46 AM

    Please open a TAC case on this subject.

     

    High IO wait, typically means that your disks are too slow (not enough IOPS), which can be that the hypervisor infrastructure is overloaded, or you have not enough physical disks in a RAID, or the wrong RAID configuration.



  • 4.  RE: Performance Issues

    Posted Sep 27, 2017 05:02 AM

    Thanks. I will look into it.  It is using RAID 1+0 on four SAS disks with a 10/90 read write cache config.

     

    the second node with the same setup does not slow down.



  • 5.  RE: Performance Issues

    Posted Nov 08, 2018 10:01 AM

    Did you ever resolve this? Same thing is happening to me after upgrading to 6.7. TAC has NOT been helpful at all...



  • 6.  RE: Performance Issues

    EMPLOYEE
    Posted Nov 09, 2018 04:20 AM

     Ryan,

     

    Have you escalated this case you had at TAC?

    Can you send me a personal message with the case numbers, so I can have a look at it?

     

    Herman



  • 7.  RE: Performance Issues

    Posted Nov 09, 2018 04:41 AM

    in my case, I moved all the authentications on to the subscriber and left the publisher just mostly doing publisher role.

     

    This enabled the web gui to be responsive.

     

    The subscriber copes with the authentications as well