CPU Usage 99%

[#1]

Hi, I have a Fortigate 50a , the problem is that is showing 99 % CPU usage. Why is this happening? I have this ... Firmware Version Fortigate-50A 3.00-b0668(MR6 Patch 2) AntiVirus Licensed (Expires 2009-06-27) [Service is reachable.] AV Definitions 9.894 (Updated 2009-01-05) [Update] Intrusion Protection Licensed (Expires 2009-06-27) [Service is reachable.] IPS Definitions 2.581 (Updated 2008-12-23) [Update] What can i do? Thanks!!

[abelio]

miglogd 28 R 98.6 4.1

it seems that the logging daemon is the evil guy here. Try re-checking all log related things, maybe disable it for a while. Ensure that you have not enabled ' loglocaldeny' (CLI commands:

 config system global
  set loglocaldeny disable
 end
 

-check if the following bug descriptions could apply to your situation: Description: The CPU usage of the FortiGate' s HTTP proxy (httpd) may go unexpectedly high after it handles more than 1024 requests to go to servers that are listening on port 8008 or 8010. Models Affected: All Bug ID: 73416 Status: Fixed in MR6 – Patch Release 3. Description: CPU usage by urlfilter daemon may unexpectedly rise to 100%, even when its not in use. Models Affected: All Bug ID: 76950 Status: Fixed in MR6 – Patch Release 3. - consider also reboot your box and upgrade to MR6 patch4 good luck

[#3]

Thanks both!! I do what Abelio said and.... nothing. I reboot the box and the cpu usage goes between 86% and 99%

[abelio]

Try upgrading to MR6 patch4

[iFortify]

I agree with abelio --> It is " best practice" to stay current with the patch releases for the MR (Major Release) that you are running on the Fortigate as the patch releases will " fix" bugs that have been reported in earlier releases. As you are running an earlier release of MR6, upgrade to the latest patch release and test to see if the issue persists.

[iFortify]

About the FortiOS diagnose sys top CLI command http://kc.forticare.com/default.asp?id=3825&SID=&Lang=1 FGT# diag sys top 1 -->will list the process that is consuming CPU/Memory at the top of the output so that you can quickly identify the ' culprit' .

[#7]

Hi, If you are using the FSAE (Fortinet Server Authentication Extension) software in your DNS server then see if the service / process is hangup. The " cpu at 99% bug" we are having is because of this problem. DrWatson always try to revive the process but it fails and all hell broke loose. I managed to erradicate DrWatson but I see that the program still have some problems " memory" problems. the version I' m using is: FSAE_Setup_3.0.025.exe I don' t know if there is a new one? Anyways, hope this helps you.

[rwpatterson]

I' m running 3.0.021 without problems. ' If it ain' t broke, don' t fix it!'

[#9]

Thanks all for the comments. I upgrade to MR6 patch4 It seems ok now.... Thanks all ....