FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
masaleh
Staff
Staff
Article Id 424203
Description This article describes the steps to troubleshoot and resolve high CPU usage and Web GUI accessibility issues on entry-level FortiGate devices(i.e., FortiGate 40F, 60E, 60F). The issue is characterized by high httpsd process utilization, repeated crash logs, and difficulties accessing the Web GUI.
Scope FortiGate.
Solution
Continuous high CPU usage is noticed on the httpsd daemon in some cases, as shown below.
 
diagnose system top 2 50
Run Time:  0 days, 16 hours and 15 minutes
62U, 0N, 12S, 26I, 0WA, 0HI, 0SI, 0ST; 1866T, 384F
          httpsd     3488      R      95.7     2.7    2
          httpsd     3471      S      98.9     1.8    1
          httpsd     3456      S      82.2     1.7    2
          httpsd     3510      R      91.7     1.9    3
 
Killing the 'httpsd' daemon does not resolve the issue.
 
Some performance issues have been observed with the firewall storing all users' login records in the past, and disabling it frees the firewall resources. The command to disable login-timestamp is:

config system global

    set login-timestamp disable

 

Verify that the httpsd process utilization has decreased after making the change. If the issue persists, review the crash logs to identify any other potential causes and take corrective action.
 
Follow these steps to resolve high CPU usage and Web GUI accessibility issues on FortiGate devices.