Skip to main content
A
Anonymous_User
New Contributor III
February 19, 2022

Technical Tip: Tips to optimize FSSO Collector Agent operation for CPU utilization

  • February 19, 2022
  • 0 replies
  • 5722 views
Description This article describes FSSO CA optimization regarding CPU resources consumed by the collector agent.
Scope FortiGate, FSSO CA 5.x.
Solution

CA configuration for best practice resource utilization.

 

 

  1. Enable cache from the CA menu:

 

 

ethomollari_0-1645287861272.png

 

 

  1. Raise the Worker Thread to 512 (Advanced settings -> Worker thread count) from 128.

 

ethomollari_1-1645288030124.png

 

  1. Set log level to Debug and log size to 100 MB.

 

Logging level 'Information' can also be used since it will generate and store less granular logs, whilst debug will give more information to troubleshoot user activity and general information about CA.

 

ethomollari_2-1645288286874.png
  1. Change 'Cache expire in(minutes)' to a larger number, like 120/240 minutes.

 

  1. Change 'Workstation verify internal' to a larger number, like 120/240.

 

Note: CA settings are usually left to default and that will not cause any issues.

Tips on this guide can be applied to specific cases when  the FSSO Collector agent is consuming too much CPU resources, and that after stopping the CA service, CPU falls back to normal levels.
    Terms & ConditionsAccessibility statement