Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
FTGmaster
New Contributor

Fortigate 110C, FortiOS 5.2.4 and High CPU Usage

Hi

 

I just upgraded my fgt 110c from 5.0.12 to 5.2.4 (officially supported)

I notice that  have the CPU usage at 99%, always (Total Sessions: 1282 ).

With 5.0.12 the CPU was 5-10% max.

  What might be the causes?   Thank you

FCNSA - FCNSP Certified FortiGate 20D - 30B - 40C - 50B - 60B - 60C - 80C - 100D - 110C FortiAnalyzer 100C FortiAP 220B HA

FCNSA - FCNSP Certified FortiGate 20D - 30B - 40C - 50B - 60B - 60C - 80C - 100D - 110C FortiAnalyzer 100C FortiAP 220B HA
2 REPLIES 2
Somashekara_Hanumant

Hi,

 

Which process is consuming more cpu usage, kindly provide the below command output

 

diag sys top 3 40

diag sys top-summary

get system perf status

 

Regards,

Somu

EMEA Technical Support
emnoc
Esteemed Contributor III

Diag sys top will show you want's running. FWWI I have a few FGT110C never evere would run 5.2.x on them;

 

e.g

 

Run Time:  235 days, 1 hours and 55 minutes 52U, 47S, 1I; 1008T, 336F, 87KF        ipsengine    25224      R <    12.1     3.6        ipsengine    25231      R <    12.1     3.6        ipsengine    25229      R <    12.1     3.6        ipsengine    25230      R <    12.1     3.6        ipsengine    25228      R <    12.1     3.6        ipsengine    25225      R <    12.1     3.6        ipsengine    25226      R <    12.1     3.6        ipsengine    25227      R <    12.1     3.6           newcli    14448      R       0.1     1.5             sshd    14446      S       0.1     1.2           httpsd     2260      S       0.0     2.5           httpsd       69      S       0.0     2.2          cmdbsvr       31      S       0.0     2.1           hasync       77      S <     0.0     1.9           httpsd       41      S       0.0     1.7             iked       72      S       0.0     1.7          miglogd       39      S       0.0     1.6          sslvpnd       71      S       0.0     1.6           newcli    14447      S       0.0     1.5            fgfmd       89      S       0.0     1.5

 

 

Also the "diag firewall  statistic show" might give you and ideal of your traffic. Clear it and then monitor over a few periods

 

diag firewall  statistic clear

diag firewall  statistic show

 

If all else fails, open a ticket with SUPPORT

 

Ken

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
Labels
Top Kudoed Authors