Cybersecurity Forum

This forum is for all security enthusiasts to discuss Fortinet's latest & evolving technologies and to connect & network with peers in the cybersecurity hemisphere. Share and learn on a broad range of topics like best practices, use cases, integrations and more. For support specific questions/resources, please visit the Support Forum or the Knowledge Base.

YuriBozh
New Contributor

HTTPD restart

Hi, 

Can any one tell how to restart httpd service at FortiGate appliance.

I was trying "diag sys kill 9 xxx" command to restart mentioned service, but didn't get any result (even existing sessiones wasn't brake).

May be, is there any other way to restart mentioned service (may be using fnsysctl command)?

1 REPLY 1
hilelko
New Contributor II

Hi Yuriy

from my knowledge, the best way to clear / free memory used by HTTP demon (HTTP Proxy) is via CLI "diag test application"

it's FortiOS basic & mandatory process, and you can't kill it without a full unit restart 

reference:  FortiOS™ Handbook - Troubleshooting  version 5.4.0 

http://docs.fortinet.com/uploaded/files/2924/troubleshooting-54.pdf

page 15 + 17  + 18 

diag test application http  

diag test application http 2   

you can also use option 22 or 222 

The value can be one from the following:

2 Drop all connections.

22 Drop max idle connections.

222 Drop all idle connections.

4 Display connection stat.

44 Display info per connection.

444 Display connections per state.

4444 Display per-VDOM statistics.

44444 Display information about idle connections.

55 Display tcp info per connection.

6 Display ICAP information.

70 Disable ICAP 'Allow: 204' (default).

71 Enable ICAP 'Allow: 204' .

72 Drop all ICAP server connections.

11 Display the SSL session ID cache statistics.

12 Clear the SSL session ID cache statistics.

13 Display the SSL session ID cache.

14 Clear the SSL session ID cache.

80 Show Fortinet bar SSL-VPN bookmark info.

81 Show Fortinet bar SSL-VPN bookmark cache.

82 Show Fortinet bar SSL-VPN bookmark LRU list.

 

Best Regards 

Hillel Kobrovski