Skip to main content
Esteemed Contributor III
February 19, 2022

Technical Tip: Tips to optimize FSSO Collector Agent operation for CPU utilization

Description This article describes FSSO CA optimization regarding CPU resources consumed by the collector agent.
Scope FortiGate, FSSO CA 5.x.
Solution

CA configuration for best practice resource utilization.

 

 

  1. Enable cache from the CA menu:

 

 

ethomollari_0-1645287861272.png

 

 

  1. Raise the Worker Thread to 512 (Advanced settings -> Worker thread count) from 128.

 

ethomollari_1-1645288030124.png

 

  1. Set log level to Debug and log size to 100 MB.

 

Logging level 'Information' can also be used since it will generate and store less granular logs, whilst debug will give more information to troubleshoot user activity and general information about CA.

 

ethomollari_2-1645288286874.png
  1. Change 'Cache expire in(minutes)' to a larger number, like 120/240 minutes.

 

  1. Change 'Workstation verify internal' to a larger number, like 120/240.

 

Note: CA settings are usually left to default and that will not cause any issues.

Tips on this guide can be applied to specific cases when  the FSSO Collector agent is consuming too much CPU resources, and that after stopping the CA service, CPU falls back to normal levels.

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT