Skip to main content
FTGmaster
New Member
August 18, 2015
Question

Fortigate 110C, FortiOS 5.2.4 and High CPU Usage

  • August 18, 2015
  • 2 replies
  • 8373 views

Hi

 

I just upgraded my fgt 110c from 5.0.12 to 5.2.4 (officially supported)

I notice that  have the CPU usage at 99%, always (Total Sessions: 1282 ).

With 5.0.12 the CPU was 5-10% max.

  What might be the causes?   Thank you

    2 replies

    Somashekara_Hanumant
    Staff & Editor
    Staff & Editor
    August 18, 2015

    Hi,

     

    Which process is consuming more cpu usage, kindly provide the below command output

     

    diag sys top 3 40

    diag sys top-summary

    get system perf status

     

    Regards,

    Somu

    emnoc
    New Member
    August 18, 2015

    Diag sys top will show you want's running. FWWI I have a few FGT110C never evere would run 5.2.x on them;

     

    e.g

     

    Run Time:  235 days, 1 hours and 55 minutes 52U, 47S, 1I; 1008T, 336F, 87KF        ipsengine    25224      R <    12.1     3.6        ipsengine    25231      R <    12.1     3.6        ipsengine    25229      R <    12.1     3.6        ipsengine    25230      R <    12.1     3.6        ipsengine    25228      R <    12.1     3.6        ipsengine    25225      R <    12.1     3.6        ipsengine    25226      R <    12.1     3.6        ipsengine    25227      R <    12.1     3.6           newcli    14448      R       0.1     1.5             sshd    14446      S       0.1     1.2           httpsd     2260      S       0.0     2.5           httpsd       69      S       0.0     2.2          cmdbsvr       31      S       0.0     2.1           hasync       77      S <     0.0     1.9           httpsd       41      S       0.0     1.7             iked       72      S       0.0     1.7          miglogd       39      S       0.0     1.6          sslvpnd       71      S       0.0     1.6           newcli    14447      S       0.0     1.5            fgfmd       89      S       0.0     1.5

     

     

    Also the "diag firewall  statistic show" might give you and ideal of your traffic. Clear it and then monitor over a few periods

     

    diag firewall  statistic clear

    diag firewall  statistic show

     

    If all else fails, open a ticket with SUPPORT

     

    Ken