FortiGate FG-40F freeze (stitch:Security Rating Notification is triggered)

[Bman854]

Dear Forti Support,

it has happened today again (twice in last two weeks), that our box stopped working without any obvious reason. Our box:

• FG-40F
• firmware v7.2.8 build1639

In the log there are lines (in this order):

1. stitch:Security Rating Notification is triggered.
2. The system has activated session fail mode
3. Kernel enters memory conserve mode
4. Kernel enters extreme low memory mode.

Both RAM and CPU got to >90%, network stopped working and we had to power it off & on again.

Regards

[ap]

Hi @Bman854 ,

As fortigate enters into conserve mode, we need more logs to identify what is causing conserve mode.

I will recommend to set up teraterm script to collect logs output continuously as per below KB article:
https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-High-memory-and-High-CPU-general-scr...

Please note that you will need to choose correct script file depending on whether you have multiple VDOM mode enabled or not.

Once logs are collected, you can create a support ticket and attach the logs for further review.

Cheers,

Ankit

If you have found a solution, please like and accept it to make it easily accessible to others.