Fortigate CPU/memory leak automation technical tip

Fortigate Automation Stich is great!

If you have a security fabric configured you can automate a lot of stuff.

You can automate a process restart if there is high CPU or memory :)

Example:

High CPU event trigger is already existing but for the memory it is called Conservative mode.

You can probably use also Playbooks if FortiAnalyzer is licensed for them or FortiManager to push a CLI script to all firewalls if you have no security fabric configured.

Posts from which I got the idea:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-restart-WAD-process-on-a-specific-day-and/ta-p/329282#M8818

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Execute-a-CLI-Script-based-on-High-Memory-using/ta-p/197758

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Execute-a-CLI-script-based-on-high-CPU/ta-p/195103