Fortigate 80C memory usage with FortiOS 5.2.x
Hi,
we have a few 80C running now on FortiOS 5.2.x. On many of them we are running into out-of-memory situations (conserve mode, AV connection limit) with rather small configuration and typical about 10 users / PCs.
Although upgrading the hardware maybe considered later, for now we cannot upgrade all the units better hardware.
So just after a reboot the memory usage is like this:
CPU [||||||||||| ] 28.0% Mem [||||||||||||||||||||||||||||| ] 73.0% 365M/499M Processes: 20 (running=1 sleeping=82) PID RSS CPU% ^MEM% FDS TIME+ NAME * 249 54M 0.8 10.9 27 00:36.95 ipsmonitor [x3] 53 42M 0.0 8.5 13 00:15.20 pyfcgid [x4] 84 34M 21.5 6.9 15 03:54.83 sshd [x4] 52 28M 0.0 5.8 19 00:47.26 httpsd [x5] 32 20M 0.0 4.1 13 00:15.95 cmdbsvr 50 16M 0.0 3.3 28 00:01.57 miglogd 61 16M 0.0 3.2 19 00:08.20 ipshelper 67 14M 0.0 2.9 838 00:34.20 proxyd [x6] 64 14M 0.0 2.8 40 00:15.61 authd 94 12M 0.0 2.4 16 00:00.50 fgfmd 95 11M 0.0 2.4 25 00:00.48 cw_acd 70 11M 0.0 2.3 28 00:08.98 scanunitd [x3] 37 10M 0.8 2.1 89 00:13.21 zebos_launcher [x12] 82 9M 0.0 1.9 20 00:01.86 urlfilter 91 9M 0.0 1.8 29 00:01.27 dnsproxy 71 9M 0.0 1.8 11 00:00.45 updated 63 8M 0.0 1.8 14 00:00.38 forticldd 62 8M 0.0 1.8 19 00:00.20 forticron 69 8M 0.0 1.7 41 00:00.61 wad [x2] 59 8M 0.0 1.7 13 00:00.10 fnbamd
In none of the policies IPS is used, AV is currently set to inspect "nothing". Is there any way to reduce the memory used by the "ipsmonitor" process? I already tried setting the algorithm to "low", but it has no effect on the mem usage:
(global) # show ips global config ips global set algorithm low set default-app-cat-mask 18446744073474670591 end
Regards
Markus
