Security

 View Only

  • 1.  Clearpass Policy Manager - Apache web server cpu load

    Posted Mar 17, 2025 05:55 AM
    Edited by hertelfa Mar 17, 2025 06:01 AM

    Hello,

    our Clearpass deployment shows some strange phenomenon. 

    Our Apache Web Service shows cyclic CPU Load spikes up to about 100% in some occurances.

     Is there a known issue and how can we monitor what produces that spikes?

    We run version ClearPass Policy Manager 6.12.4.305024 on C3000V platform

    Best regards

    Fabian



  • 2.  RE: Clearpass Policy Manager - Apache web server cpu load

    Posted Mar 17, 2025 06:57 PM

    I don't see that on my test node. I am assuming you are running the required spec for the VM right?

    if it persists, I suggest to contact TAC



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------

    Original Message


  • 3.  RE: Clearpass Policy Manager - Apache web server cpu load

    Posted Mar 18, 2025 01:59 AM

    There were some well known issue on 6.12.x, not sure if they fixed it in sub versions

    It would be better if you open a TAC Case and check with them



    ------------------------------
    Shpat | ACEP | ACMP | ACCP | ACDP
    Just an Aruba enthusiast and contributor by cases
    If you find my comment helpful, KUDOS are appreciated.
    ------------------------------

    Original Message


  • 4.  RE: Clearpass Policy Manager - Apache web server cpu load
    Best Answer

    Posted Mar 18, 2025 06:37 AM

    You may have a look in the Apache logs what happens around that time:

    Maybe there is an attack or web security scan running at that time? If there is a CPU spike, I would expect something in the logs. And, yes TAC can probably even better find out what's going on and if it's harmful or needs to be addressed.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------

    Original Message


  • 5.  RE: Clearpass Policy Manager - Apache web server cpu load

    Posted Mar 18, 2025 10:07 AM

    Thanks. That´s the file which we were looking for. 

    The problem with our environment is that we have about 30 Extension for multiple MS Intune Tenants.

    All extensions start the full syncs simultaneously. We now scheduled the sync in a range about 4 hours. Now the CPU load is in an acceptable range.


    Original Message


Related Content