FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
tonylin1
Staff
Staff
Article Id 315056
Description This article explains the CSF daemon files memory usage warning log.
Scope

In v7.4, the below logs can appear:

 

date=2024-0X-XX time=0X:XX:XX eventtime=1710725118393637460 tz="+0800" logid="0100022047" type="event" subtype="system" level="information" vd="root" logdesc="CSF daemon files memory usage warning." msg="Security Fabric daemon file memory management is enabled. Current usage is 0 bytes. Daemon may not work correctly when the set quota 397805772 bytes is reached."

Solution

CSF daemon files memory usage warning:

When FortiGate becomes Security Fabric root, FortiGate will gather the downstream device info and keep it in memory.

This message is just to give info that the Security Fabric will not work properly if memory reaches the allow setting for security fabric.

 

Check the current usage from the command:

 

diagnose user-device-store unified stats

 

And change allocate memory with the command:

 

config system global

    set user-device-store-max-unified-mem <value>
 end

 

The minimum, default and maximum values of 'user-device-store-max-unified-mem' can be found in the CLI after filtering the parameter.

Screenshot 2025-08-19 103350.png

 

 

Related article:
Technical Tip: Understanding 'user-device-store-max-unified-mem' in FortiGate