Graymail Engine, SBRS Engine, AV Engine Get Restarted in IronPort

[rockbd]

Hi All

Recently my IronPort's(Email Security) Graymail Engine, SBRS Engine, AV Engine get automatically restarted with the following message:

Graymail Engine: Process restarted due to watchdog health check failures.

Sophos Engine: Process restarted due to watchdog health check failures.

SBRS Engine: Process restarted due to watchdog health check failures.

As far as my understanding it is done due to watchdog health check. Why this is happening? Should i worry or it is just normal process of Ironport.

[Georg Pauwen]

Hello,

check if the bug below applies. What is the CPU usage when this occurs ?

Bug Search Tool
Bug SearchCSCvf77729
Help | Feedback Feedback
Watchdog processes are too expensive, and timeout improperly
CSCvf77729
Description
Symptom:
When the ESA is under heavy CPU load, older model appliances can improperly register watchdog timeouts.

Wed Aug 30 06:13:30 2017 Critical: repeng: Watchdog timed out:
30 Aug 2017 06:14:30 +1000 SBRS Engine: Process restarted due to watchdog health check failures.

Conditions:
This condition can occur when the CPU load is around double the number of cores on the appliance.

Workaround:
None, the watchdogs and process restarts should not cause problems, but it indicates that your overall CPU load is excessive.

[rockbd]

My IronPort appliance is Cisco C600V and the OS version is 11.1.0-128. Am i running the leatest Iropnport Email Appliance or Cisco introduce new one already.

I didn't find any warning regarding CPU utilization. The CPU threshold is set to 85 %. So is this for the CPU or other factor.

Any other suggestion.