Fortigate Understanding CPU & Memory utilization (diag sys top)

Fortigate Understanding CPU & Memory utilization (diag sys top) #fortios #troubleshooting
diag sys top
diag sys top-mem
diag sys top-sockmem
Understanding Fortigate Process states
Understanding Fortigate process memory utilization
Understanding Fortigate Process CPU utilization.
#fortios #troubleshooting #fortigate #fortinet #diag #rosatechnocrat
Check out my other videos.

[@PratikWaghmare-gz8hr]

Big fan of your video sir.. keep doing this work....some question for you.
1) - If we know one process is using high CPU and memory than usual and because packet drop take place and services in LAN is not working or running slow then how to troubleshoot this.
2) How to kill/end/stop process.
3) If one process is using more socket memory then how to troubleshoot this issue.

[@rosatechnocrat]

Hi Pratik thanks for your feeeback and thanks for support.

[@rosatechnocrat]

The other two questions requires a big explanation may not be responded with one liner.

[@PratikWaghmare-gz8hr]

@@rosatechnocrat sir actually im facing this issue regularly in my corporate environment…if you dont mind can i share you my email here so that you can share some troubleshooting steps for those kind of issue.

[@rosatechnocrat]

@@PratikWaghmare-gz8hr what is current software version and which appliance

[@PratikWaghmare-gz8hr]

@@rosatechnocrat Im having fortigate 200f firewall, and I have less experience in IT. My process taking High CPu and memory and regularly Internet in my Lan is working very slow

[@yourquery]

Super

[@rosatechnocrat]

Thanks @yourquery

[@linjaxdx9230]

Hi sir on the first i want to thank you for this great video.
So i have a problem the ipaengine take a lot of memory how can i resolve it

[@rosatechnocrat]

You Need to check Below things
1> If there are any IPSENgine crashes ( check by command diag debug crashlog read)
2> Check the policy which have IPS profile enabled , Try by disabling IPS profile on few policies.
3> Check by restarting the IPSengine process.
Based on the above analysis , we can further drill down to the reason

[@jonatangeusti3340]

hello friend
your explanation is very good thank you
my fortigate is showing 100% of the cpu and the process that is consuming all this is ipsengine.
for now I killed the process but I don't think it's right. Is there any way to keep the process active without consuming so much? or put a limit that the process can use the CPU?

[@rosatechnocrat]

Which model firewall and are u using ips security profile in policies

[@rosatechnocrat]

otherway is also you can use a script to automatically restart IPS process.

[@PratikWaghmare-gz8hr]

Hello sir im got one recent case for fortigate-
Customer saying we are facing Probe failed issue while adding device in FMG.
Can you please guide me on this

[@rosatechnocrat]

Check if fmg access protocol on fortigate is enabled on the interface

[@PratikWaghmare-gz8hr]

@@rosatechnocrat ok ill check and let you know sir

[@ataris2548]

Does having high cpu usage in fortigate affect internet connection? We are having problem with our connection and when we stop ips process that caused high cpu usage our network connection became stable. Thanks

[@rosatechnocrat]

Yes High CPU can impact passing traffic and May drop packets as CPU is busy and not enough resources available. Which model firewall you have

[@ataris2548]

100E sir. Thanks

[@rosatechnocrat]

@@ataris2548 yes It’s possible on this box to impact traffic. If you can find the cause behind IPS cpu usage that will fix. You can also use automated script to restart IPS process automatically.

[@rajanpandey4188]

Bro can i get some health check cmd, like in this video. for example to check utilization, temperature, physical port status, list of IPS, VRF, VPRN & so on. Thanks in advance.

[@rosatechnocrat]

Yeah sure … I can send you

[@rosatechnocrat]

Rajan send me your email I’d , will send commands