java.exe CPU on PM server

krisvdv
krisvdv W/ Alumni Posts: 31 Security Scout

hi,

 

we're using PM server and console 14.20, but the f-secure clients on the servers are still using 12.12.
I just started working here in this company, so I don't know if this is an old or new issue, but I just noticed today the the PM server is very, very unresponsive due to java.exe  running from C:\Program Files (x86)\F-Secure\Management Server 5\jre\bin.  This has been going on for several hours now. Is this expected behaviour or not? Anything I can do?

Thanks!

Comments

  • A_Grinkevitch
    A_Grinkevitch W/ Partner, W/ Staff, W/ Product Leadership Posts: 169 W/ Product Leadership

    Hi Krisvdv,

    Policy Manager is the Java based application and runs under java.exe process. It is normal to have some load as it constantly processes statuses and other information hosts are pushing to the PMS. If you did not update policies recently and CPU load is high for a long time, please collect fsdiag and provide it via Support for further analysis.

     

    Regards,

    Alex

  • krisvdv
    krisvdv W/ Alumni Posts: 31 Security Scout

    hi Alex,

     

    thanks for the feedback.

     

    I think the CPU load on the server is too high as java.exe is continuesly between 40 and 70 and very often goes up to 85-100%.   Working on the console is really difficult.

     

    I'll send the fsdiag output to Support.


    Kris

  • krisvdv
    krisvdv W/ Alumni Posts: 31 Security Scout

    There seems to be a problem with the fsdiag support tool on our PM server.  I've already tried it 3 times using both the GUI and the command line, and while the screen shows "gathering information" etc,  and at the end even a confirmation "file has been put on the desktop",  the file can't be found anywhere. Not on the desktop, not in other user profiles/folders/locations. The local server disk has more than enough space.  No error, no warning, only confirmation that it's done.  Strange....
    Has anyone seen this problem before?

  • krisvdv
    krisvdv W/ Alumni Posts: 31 Security Scout
    This time, I'm seeing "The information was not gathered. Error occured."
  • MonikaL
    MonikaL W/ Alumni Posts: 206 W/ Former Staff

    Hi krisvdv,

     

    If the built-in fsdiag fails, you may download the standalone fsdiag tool. Follow the steps below:

     

    Download the standalone fsdiag tool from:

    https://download.f-secure.com/support/tools/fsdiag/fsdiag_standalone.exe
    Double-click and run the fsdiag_standalone.exe file
    Click Run diagnostics. The tool starts to gather diagnostic information
    Once completed, it generates a file called fsdiag.7z on your desktop
    Attach the file to your email reply to F-Secure support.

     

    Regards,
    Monika

  • krisvdv
    krisvdv W/ Alumni Posts: 31 Security Scout

    thanks, this worked!

  • krisvdv
    krisvdv W/ Alumni Posts: 31 Security Scout

    new problem: 

     

    fsdiag.zip is about 175 MB large and the support request page says "Total size of attached files should be under 100MB". 

     

    What can I do in this case?  Why is it limited to 100MB if the support tool can create larger zip files?

     

    thanks

     
  • MonikaL
    MonikaL W/ Alumni Posts: 206 W/ Former Staff

    Hi krisvdv,

     

    If the file size of your FSDIAG file is large, you can upload the file to our FTP site. Make sure that you have a case number before submitting the file. You will receive a case number in the email sent by our customer support.

     

    1. Rename the generated diagnostic file following this format: [Your case number here]_FSDIAG.TAR.GZ or [Your case number here]_fsdiag.7z
    2. Right-click the Windows Start icon, and select Open Windows Explorer. A Windows Explorer window opens
    3. Type ftp://ftp.f-secure.com/incoming in the address bar, and press Enter
    4. Copy the renamed fsdiag file to the window (or drag and drop it there)
    5. Reply to the email sent by our customer support to inform us that you have now uploaded the FSDIAG file.

     

    Regards,
    Monika

  • krisvdv
    krisvdv W/ Alumni Posts: 31 Security Scout

    hi F-Secure,

    for me, you can close this ticket.

    We added a cpu to the server and everything is running well now.

    thanks for the support!

    Kris

     

  • JamesC
    JamesC W/ Partner, W/ Staff, W/ Moderator Posts: 498 Moderator

    Hi krisvdv

     

    I am glad we managed to resolve your issue.

  • MJ-perComp
    MJ-perComp W/ Alumni Posts: 669 Firewall Master
    While I see no use for limiting virtual servers to 1 or 2 CPUs, as modern hypervisors assign needed ressources dynamically,

    Our recommendation is 2 CPUs if the server is dedicated to PMS and AUA.
    4 CPUs if you additionally want to run PMC on the machine as well.
This discussion has been closed.