FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
jballini
Staff
Staff
Article Id 398652
Description This article describes how to check if all the CPU cores are highly utilized or not.
Scope FortiGate.
Solution

Sometimes, one Core CPU can show high usage, but that does not mean there is a high CPU usage.

 

From FortiGate GUI, go underDashboard -> Status -> Select the CPU graph:

 

CPU core.png

 

Select 'Show per core CPU usage', and for instance, it is possible to see:

 

Core.png

 

It is possible to get more detailed information through the CLI:

 

chameleon-kvm97 # get system performance status
CPU states: 0% user 1% system 0% nice 99% idle 0% iowait 0% irq 0% softirq  
CPU0 states: 0% user 1% system 0% nice 99% idle 0% iowait 0% irq 0% softirq
Memory: 2041668k total, 1404988k used (68.8%), 409480k free (20.1%), 227200k freeable (11.1%)
Average network usage: 347 / 531 kbps in 1 minute, 273 / 55 kbps in 10 minutes, 281 / 20 kbps in 30 minutes
Maximal network usage: 1989 / 4204 kbps in 1 minute, 2621 / 4204 kbps in 10 minutes, 2626 / 4204 kbps in 30 minutes
Average sessions: 64 sessions in 1 minute, 47 sessions in 10 minutes, 46 sessions in 30 minutes
Maximal sessions: 77 sessions in 1 minute, 77 sessions in 10 minutes, 78 sessions in 30 minutes
Average session setup rate: 0 sessions per second in last 1 minute, 0 sessions per second in last 10 minutes, 0 sessions per second in last 30 minutes
Maximal session setup rate: 3 sessions per second in last 1 minute, 5 sessions per second in last 10 minutes, 23 sessions per second in last 30 minutes
Average NPU sessions: 0 sessions in last 1 minute, 0 sessions in last 10 minutes, 0 sessions in last 30 minutes
Maximal NPU sessions: 0 sessions in last 1 minute, 0 sessions in last 10 minutes, 0 sessions in last 30 minutes
Virus caught: 0 total in 1 minute
IPS attacks blocked: 0 total in 1 minute
Uptime: 11 days, 2 hours, 47 minutes

 

diagnose sys mpstat 2
Gathering data, wait 2 sec, press any key to quit.
..0..1
TIME        CPU    %usr   %nice    %sys %iowait    %irq   %soft  %steal   %idle
04:23:08 AM all    0.50    0.00    0.50    0.00    0.50    0.50    0.00   98.00
              0    0.50    0.00    0.50    0.00    0.50    0.50    0.00   98.00

 

TIME        CPU    %usr   %nice    %sys %iowait    %irq   %soft  %steal   %idle
04:23:10 AM all    9.00    0.00    2.00    0.00    0.50    1.00    0.00   87.50
              0    9.00    0.00    2.00    0.00    0.50    1.00    0.00   87.50

 

TIME        CPU    %usr   %nice    %sys %iowait    %irq   %soft  %steal   %idle
04:23:12 AM all    0.50    0.00    0.00    0.00    0.50    1.00    0.00   98.00
              0    0.50    0.00    0.00    0.00    0.50    1.00    0.00   98.00

 

TIME        CPU    %usr   %nice    %sys %iowait    %irq   %soft  %steal   %idle
04:23:14 AM all    0.50    0.00    0.50    0.00    0.50    0.50    0.50   97.52
              0    0.50    0.00    0.50    0.00    0.50    0.50    0.50   97.52