Description
This article describes the behavior and steps noticed when multiple targets are launched with recording enabled.
If the browser extension is enabled, WebRDP is launched, launching 3 or more targets with recording, and high RAM usage is observed.
Timeouts, random disconnections are also observed.
Scope
FortiPAM.
Solution
The FortiPAM browser extension is available for Chrome, Edge, and Firefox.
Step 1:
Verify if the FortiPAM browser extension is used along with FortiClient.
Step 2:
Launch a few targets to see if the process under the task manager shows high CPU usage, as the screenshot below.
Note that this shows the extension used is Edge.
Note that the extension used is Chrome.
The tab CPU can be expanded to see the details of processes, as shown below.
Step 3:
The common errors seen with this are:
Pattern 1.
Secret video uploading timed out.
Start recording secret session.
Secret permission check is done. Start to launch secret.
Secret session started.
Start recording secret session.
Secret video uploading timed out.
Pattern 2.
wad_pam_token_time_out :1323 PAM token timeout cb, token=0x7fcc0711fb30, state=upload-video
wad_http_server_close_common
Step 4:
Collect debugs with the below commands to verify this:
diagnose debug console timestamp enable
diagnose wad debug enable category auth
diagnose wad debug enable category secret
diagnose wad debug enable category rdp
diagnose wad debug enable category gui-api
diagnose wad debug enable category http
diagnose wad debug enable level verbose
diagnose debug enable <----- Reproduce the issue at this time.
diagnose debug disable <----- To disable the debugs.
Step 5:
Check via the extension Firefox, this should consume less CPU, and the random disconnects, recording timeouts should not be seen. Multiple web RDP sessions can be started with video recording enabled.
This is a known issue, and a fix for this is in FortiClient v7.4.5.
The current workaround is to use Firefox as an extension.
Note:
Always note that when recording is enabled, close the web browser gracefully; If not disconnected gracefully, even then, 'Secret video uploading timed out' will be seen.
