Improve web filter speed by using Local Content Filtering Database–Sophos UTM

Issue

  • You experience a slow down in web browsing when using the Sophos UTM as a Web proxy.
  • Sometime you see the high latency, slow web browsing when enable Web filtering in Sophos UTM.

Best practice

  • Update to newest version of Sophos UTM (current is 9.3xx)
  • Download the Content Filtering Database to local Memory (RAM). This method is not Sophos official
    • Faster URL checking by category
    • Reduce bandwidth usage
    • Reduce connection to Internet from the devices
    • Higher web filter performance

Important notes

  • That’s not official, you do it with your risk.
  • Revert to default setting: cc set http sc_local_db none
  • When you disable/enable the web proxy, database will download again.
  • If you set local database in “disk”, the CPU 100% maybe occur because of the high HDD reading.
  • The UTM recommends more than 4GB or 8GB Memory
  • The local content filtering database is stored in HDD, cached in RAM

How to do

1. Enable Shell Access

Management > System Settings > Shell Access > Set password for loginuser and root.

Allow network: Your local LAN > Click Apply

image

2. SSH to the UTM

Using Putty software to SSH to the UTM

Login as: loginuser

image

Type “su” to go to root mode

image

3. Verify DB settings

cc get http sc_local_db

image

4. Set the database as local

cc set http sc_local_db mem

image

5. Reload the HTTPPROXY service

/var/mdw/scripts/httpproxy restart

image

6. Verify first DB download

Web surfing will be stopped until done – about 380-400 MB

ls -lh /var/chroot-http/var/pattern/sfcontrol

image

7. Verify DB in Memory

image

 

8. Command options:

cc set http sc_local_db [none,disk,mem]

none     – default, don’t use local categorization at all use online query as default.

disk     – use local Database, but use it only on disk. Useful for boxes with little RAM.

mem     – use local Database, and keep it in memory for faster access.

6 Comments

  1. Hi, I have some question:
    – Will database downloaded when using command “cc set http sc_local_db mem” or database must download before and imported to UTM ?
    – Have any interupt system UTM when change setting database local to memory if system is running online ?

    Thank you

    • 1. Database will download after type command and restart HTTP proxy service.
      2. On first time downloading, the Web proxy will not work. So you will get downtime for web surf (about 20′, depend the internet line)

  2. Wow, thank you for this tip. Making the discussed changed seems to have really improved my web surfing performance. Are there any other tweaks like this one? Thank you very much for this tweak and also for any additional tweaks you may provide.

Leave a Reply

Your email address will not be published.


*


This site uses Akismet to reduce spam. Learn how your comment data is processed.