On Linux-based software like NG Firewall, high RAM usage isn't necessarily a bad thing. With that said, if you'd like to reduce your NG Firewall's RAM consumption — particularly important on devices with 2 GB or RAM or less — here are some things you can do:
- Disable and uninstall memory-intensive applications.
The #1 culprit here is Virus Blocker Lite*, which requires about 600 MB of RAM. Intrusion Prevention also runs at about 300 MB by itself, with more RAM required for additional blocking rules.
*Please note that the full version of Virus Blocker uses a different database than Virus Blocker Lite and is significantly lighter on RAM.
- Uninstall disabled applications.
This will be anything that's installed but not running. If it's a temporary disabling, you can leave it, but if the app isn't going to be used in the near future we recommend uninstalling it entirely.
- Uninstall applications that are running but have no rules enabled or otherwise aren't being used.
Typical apps will include Firewall, Captive Portal, and VPN apps.
- Uninstall Spam Blocker and Phish Blocker if they're not being used.
These apps only scan SMTP port 25 traffic, so if you don't have an on-premise email server, they're not doing anything for you. (Phish Blocker also uses the same database as Virus Blocker Lite, so it's also memory-intensive.)
- Bypass DNS sessions.
We have a default rule in Config > Network > Bypass Rules which is not enabled by default, but turning that on can help reduce memory usage.
- Check for large amounts of report processing.
Do you have any of the advanced logging options in Config > Network > Advanced enabled (they're the last four options)? Disabling those can help lower your resource consumption.