Troubleshooting Tip: FortiGate Fundamental Health Assessment

Some fundamental CLI commands can be used to obtain normal operating data for the system.

• get system status: Displays versions of firmware and FortiGuard engines, and other system information.
• get system performance status ( Run for 5 times): Displays CPU and memory states, average network usage, average sessions, and session setup rate, the number of viruses caught, IPS attacks blocked, and uptime
• diagnose sys top 2 50 (Run for 30 Sec and CTRL C to stop): Shows top processes information. The command also displays information about each process.
• diagnose sys top-all: Show top threads information.
• diagnose sys mpstat 2: CPU information.
• diagnose hardware sysinfo interrupts: Display system interrupts information.
• diagnose hardware sysinfo memory: Display system memory information.
• diagnose hardware sysinfo slab: Display memory allocation information.
• diagnose hardware deviceinfo disk: Display information of all disks.
• diagnose sys top-mem: Display processes with the most used memory (default 5 processes).
• diagnose hardware sys conserve: Diagnose command to aid in conserver mode issues.
• get router info routing-table all: Current active routing table.
• diagnose firewall iplist list: To get information on ip-pool/VIP.
• diagnose sys vd list: List Virtual Domains.
• diagnose sys cmdb info(Run 2 to 4 times) : CMDB information.
• diagnose hardware deviceinfo disk: Display information of all disks.
• diagnose autoupdate versions: Update object versions.
• diagnose sys session full-stat: It's going to display the session stat(i.e ESTABLISHED state ,SYN_SENT state, etc).
• diagnose debug crashlog read: To get the Crash log info.