FortiGate VM02 freeze

[movalto]

Dear Forti Support

I am writing to you because my Fortigate VM02 yesterday presented an unexpected increase in CPU resource of 97 - 98% for almost an hour, this event generated denial of services and intermittency and slowness on the internet. During the event, there was no significant increase in memory, concurrent sessions or sessions per second, no intrusion attempt, nor any adjustments made to the hypervisor.

Information

• FORTIGATE VM02
• v7.2.8 build1639 (Mature)
• Hipervisor: OVITR (based in KVM)

I appreciate your comments and help

[amrit]

You need to figure out which process is causing high CPU. Please provide the diag sys top 2 20 5 output when high CPU is noticed 

https://docs.fortinet.com/document/fortigate/6.2.16/cookbook/232929/troubleshooting-high-cpu-usage

Or you can setup a script to get the information https://community.fortinet.com/t5/FortiGate/Technical-Tip-Execute-a-CLI-script-based-on-HIGH-CPU/ta-...

[ap]

Hi @movalto,

High CPU can occur due to various reasons as described in below article:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Debugs-for-troubleshooting-high-CPU-Issues...

First of all, you need to identify that which part is causing high CPU as per above article:

You can run continuous script using teraterm as per below article and attach results when creating ticket with support:
https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-High-memory-and-High-CPU-general-scr...

Please note that above article has example scripts attached for high CPU. You can choose the correct script based on whether you have multiple VDOMs enabled or not.

cheers,

Ankit

If you have found a solution, please like and accept it to make it easily accessible to others.