FortiOS 5.0.10 is out!

[pcraponi]

 

No Wireless special firmware yet...

[Frosty]

I spoke too soon.  Since updating from v5.0.9 to v5.0.10 we have had significantly higher Memory utilisation, forcing the unit into conserve mode at times.  However I had also made a config change around the same time, adding a transparent proxy web cache to our main outbound Internet access rule for our staff.  I have just Disabled that again and will restart the FG200B in the morning.  Will report back after that to advise whether the memory issue is more to do with the transparent proxy, or more to do with the v5.0.10 upgrade.

[FGTuser]

After few days memory usage on all FGT's is pretty much the same as 5.0.9.

But 200B doesn't have too much RAM for memory intensive features indeed. Especially with 5.x.x image.

[Carl_Wallmark]

Web cache will use alot more memory

[pcraponi]

Selective wrote:

Web cache will use alot more memory

Agree with Selective... 200B are a 1GB RAM box... Cache process (wad) use a lot of memory... 

[Frosty]

Yes, after turned off the web caching yesterday and then giving it a reboot this morning, memory utilisation is down from > 70% to now around 35% ... a massive improvement.

It would seem that unless I can make some memory savings elsewhere, I won't be able to use the web caching for the foreseeable future.

[emnoc]

Than you should upgrade to the next model or better. This is why sizing of a fortigate has nothing to do with "how many users can I have behind my  <insert model here> " but more along the lines of what are your doing with the appliance or planning to do in the future.

Fortinet Sales  has always tried to sale  the bigger/power unit  than offering you a  smaller or just  fit. This allows for growth and trial of new features/services or provides room to grow if they offer any new features. The end of the day, a 200B is a 2nd generation 200 and limited in CPU & memory.

FWIRC I believe a 200D has double the memory requirements, somebody can correct me if I'm wrong.

[Dave_Hall]

emnoc wrote:

FWIRC I believe a 200D has double the memory requirements, somebody can correct me if I'm wrong.

The 200D has more-or-less twice the memory, 2 x CPUs (@2.50GHz vs the 200B's 1.2 GHz CPU), CP8 vs CP6, larger storage.

# get hardware status
Model name: FortiGate-200B
ASIC version: CP6
ASIC SRAM: 64M
CPU: Celeron (Covington)
Number of CPUs: 1
RAM: 1008 MB
Compact Flash: 3838 MB /dev/sda
Hard disk: 3824 MB /dev/sda
USB Flash: not available
Network Card chipset: mvl_sw Ethernet driver1.0 (rev.)
-----------------------
# get hardware status
Model name: FortiGate-200D
ASIC version: CP8
ASIC SRAM: 64M
CPU: Intel(R) Celeron(R) CPU G540 @ 2.50GHz
Number of CPUs: 2
RAM: 1974 MB
Compact Flash: 15331 MB /dev/sda
Hard disk: 15272 MB /dev/sda
USB Flash: not available
Network Card chipset: Intel(R) PRO/1000 Network Connection (rev.0000)

[FGTuser]

Really only 2GB RAM on 200D?

100D since gen2 has 4GB

60D, 90D has 2GB

In that case 200D is quite unusable.

We had couple of 100D's gen1 with 2GB RAM only, and it was royal pain running early 5.0.x images. Fortunately both RMAed for gen3 with 4GB RAM, because of died flash.

[vanc]

OndrejD wrote:

Really only 2GB RAM on 200D?

Just like 100D, the 200D gen1 has only 2G memory, bug gen2 has 4G.

[Frosty]

emnoc wrote:

Then you should upgrade to the next model or better.

I will do so at some point.  My FG200B is approaching 5 years of age.  Back when we were running v4.3 firmware its capacity was fine.  We used to do web caching back then.  I had to ditch that when we upgraded to v5.0 due to lack of RAM.  We picked the FG200B as it was the bottom end of the more corporate firewall range.  It was more than we needed back in 2010.  As far as CPU goes, I doubt we need anything more.  When I do my DR site setup in 2015 I might move the FG200B to there and get a new FG200D or similar here to replace it.

CBM-FORTIGATE (global) # get hardware status Model name: FortiGate-200B ASIC version: CP6 ASIC SRAM: 64M CPU: Celeron (Covington) Number of CPUs: 1 RAM: 1005 MB Compact Flash: 3838 MB /dev/sdb Hard disk: 61057 MB /dev/sda USB Flash: not available Network Card chipset: mvl_sw Ethernet driver1.0 (rev.)