Fortianalazer cannot accessed by ssh and gui

[Faruq_Farkhan]

hi all,

I have a problem, i cant access my fortianalyzer by ssh and gui, but when i restart it can be accessed again. 

Do you guys have a way to find a culprit that make my fortigate bang, maybe any comment on cli would be helpfull to get any insight

[AEK]

Hi Faruq

• Is the behavior recurrent?
• Which FAZ version?
• Can you check in FAZ' system logs if anything relevant happened at the time when FAZ was not accessible?

[Faruq_Farkhan]

Hi AEK,

Our device is FAZ 150G
System performance status: log rate high (111%), lograte=559/sec, msgrate=381/sec, CPU usage(66%), Memory usage(26%), Disk usage(22%)

Is this maybe become the culprit of the issue? because from what i see log rate for faz 150g only at 500 log/s

thanks

[Yurisk]

If it is a repeatable issue - it happened few times and each time restart solved the issue, then it is probably a performance issue - CPU reaching max load, memory exhaustion. It would help if you had some external monitoring of the FAZ, say via SNMP - to log the FAZ status immediately before the issue happens. 

CPU load of 66% in normal state is a bit too much, I'd say, but unless it reaches higher values like 90+% I doubt it would cause connectivity issues, but again - you need to know the values just before the freeze happens.