FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
VinayHM
Staff
Staff
Article Id 370602
Description This article describes how to reduce CPU utilization by network detection daemon.
Scope FortiGate.
Solution

The daemon is CID (Client Identification daemon). This daemon is used for device detection, and it helps in Internet of Things detection.

 

The CID process is 'Device Identification daemon'. It is enabled by default on all interfaces with 'set role lan'.

Disabling the device detection, the resource CPU will be released by the CID daemon.

To check if device detection is enabled, refer to this related KB article: Technical Tip: Enable 'Device Detection' to allow FortiOS to monitor networks.

 

To get more logs with this daemon, run the commands below:

 

diagnose sys top <refresh interval> <max # of lines> <iterations>

 

1.JPG

 

Process information:


diagnose sys process pidof cid


2.jpg

 

For each process, collect the outputs of:

diagnose sys process dump < pid >
diagnose sys process pstack < pid >
diagnose sys process trace < pid >

 

Debug CID:

 

diagnose debug application cid -1
diagnose debug console timestamp enable
diagnose debug enable

 

Leave it running for 1 minute.

 

diagnose debug reset
diagnose debug disable