Imperva Cyber Community

communities_1.jpg
 View Only
  • 1.  Gateway Performance Profiling

    Posted 08-19-2020 02:58
    Hi team

    i was looking info about the Gateway Performance profiling on the Admin Guide v13.0 and v13.5 but the only thing that i find is that you can check the impact performance on a GW on a time frame, but it does not specify if is for each agent/policy/service and it says that only has to be enable when support ask for, so thats why im asking before enabling this feature.

    Thank you team
    #DatabaseActivityMonitoring

    ------------------------------
    Jose Bolanos
    SISAP
    ------------------------------


  • 2.  RE: Gateway Performance Profiling
    Best Answer

    Posted 08-19-2020 06:30
    Jose,

    Performance profiing is used to gather statistics related to performace. It is only useful after you first establish a baseline profile amd keep it updated,  then if a performace problem is suspected, you can then enable and compare to the data gathered. To establish a baseline it is recommended to enable and capture data after the initial setup and configuration, or when any  major configuration changes are made,  Enable  performace profiling and let it run for approx 3 days to establish a baseline. After 3 days Disable It , otherwise if you leave it running it will start to degrade performace and could cause the gateway to become unresponsive,  Be sure to download the performace report from each gateway along with the Get Tech info.Save these files as they will not only establsih a baseline, they will  also help you trend the performance over time.

    When configuration changes are made and/or policies added (especially when signatures are used ) re-enable and capture data for 3 days then disable, download the GTI and Performace report.  If you do this and save the files each time, if there is ever  a suspected performace issue, you can then enable and compare to the data you you captured and saved.. 

    If the configuration does not change it is recommended to at least enable and capture data 1x a quarter Just be sure to disable it when you have the data you need.

    To summarize:
    Its ok to enable, just don't leave it running any loger than needed.
    Enable and capture data for 3 days when major changes tot he config are made or at least 1x a quarter.
    Download and save the GTI Get tech info and Performace report from Each gateway,
    Don't leave it enabled longer than 3 days unless instructed by support.


    ------------------------------
    David Mazakas
    ------------------------------



  • 3.  RE: Gateway Performance Profiling

    Posted 12-12-2022 22:06
    Hi David,
    From the exported gti, how do we confirm that the profiling is enabled on that gateway? The data showed none from the (Admin>System Performance> Gateways & Agents.

    Im running v14.6.

    TIA,
    A

    ------------------------------
    [Leangf]
    ------------------------------



  • 4.  RE: Gateway Performance Profiling

    Posted 12-13-2022 01:44
    Hi,

    To confirm that gateway performance profiling is enabled,
    you can find it in Gateway GTI /opt/SecureSphere/etc/gwconf.xml.

    ------------------------------
    Henry Zhu
    Technical Engineer
    CipherTech Co., Ltd
    Taipei
    ------------------------------



  • 5.  RE: Gateway Performance Profiling

    Posted 12-15-2022 11:06
    You might like this:

    https://github.com/imperva/mx-toolbox/tree/master/performance-monitoring ?

    ------------------------------
    Sarvesh Lad
    Tech Lead @ On-Prem Managed Services (WAF, DAM, DRA & Sonar)
    ------------------------------