FCNSA, FCNSP
---
FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30B
FortiAnalyzer 100B, 100C
FortiMail 100,100C
FortiManager VM
FortiAuthenticator VM
FortiToken
FortiAP 220B/221B, 11C
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
ORIGINAL: BWiebe Had some strangeness with one firewall I upgraded, a 200B. The smbcd process was taking 30-40% of the memory on the device and putting it dangerously close to conserve mode. After killing the process, it seemed better, but eventually hung. After a hard reboot, smbcd process again at 37.5% memory usage. Compared to other 5.2.1 firewalls, and smbcd sits at 0%. No documentation on the purpose of smbcd. I opened a call with TAC on this issue. Strangely enough, after about the 4th reboot, the smbcd process is at 0% usage and seemingly ok. Not only that but the memory and CPU usage on the firewall are better than they' ve ever been (the upgrade was from 5.0.6). Still curious on the smbcd process and why it was pinning the memory for so long....BWiebe, Just wondering how the 200B has been since your 5.2.1 upgrade? We have 3 of them running 5.0.9 and i have been holding off jumping to 5.2 to see what others have said about it and if it was worth the jump yet.
BWiebe, Just wondering how the 200B has been since your 5.2.1 upgrade? We have 3 of them running 5.0.9 and i have been holding off jumping to 5.2 to see what others have said about it and if it was worth the jump yet.Pretty solid, other than the initial issue.
Regards, Chris McMullan Fortinet Ottawa
ORIGINAL: Christopher McMullan_FTNT SMBCD could also point to DLP being enabled, or backing up configuration revisions to a network share.No DLP is enabled and no backup to network enabled/setup. It' s very perplexing to me.
ORIGINAL: Omar Hermannsson The name SMBCD seems to indicate that is has something with scanning windows filesharing protocols smb/cifs. Or something for connecting to windows fileshares. Not sure what the C stands for. SMB C-something daemon ?TAC has come back and said it' s related to SMB shares through Web Portal SSLVPN. The only problem with that is: A) The firewall was essentially unavailable/in conserve mode. B) No users access SSLVPN in that manner. C) This happened during an extensive offhours window, as well as a window when all users were in the office. D) It suddenly stopped ' misbehaving' and started working at 0% after about the 5th reboot. I still believe it' s something with the conversion from 5.0.6 to 5.2.* code-base, but what do I know?
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1696 | |
1091 | |
752 | |
446 | |
228 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.