Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Araujoctr
New Contributor II

How to configure fortigate to prevent cpu usability from reaching 80% usage?

Dear colleagues, good afternoon.

 

In this post I seek information on how to perform a configuration in Fortigate where I can prevent the equipment from reaching 80% CPU usage. This fact has occurred with some frequency lately. I would like advice on how to proceed in this situation. Thank you very much in advance for your attention and understanding.

3 REPLIES 3
msanjaypadma
Staff
Staff

Hi @Araujoctr 

 

Could you please check below article , I hope it will help you.

 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-CPU-resource-optimization-config...

Mayur Padma
Araujoctr

Thank you msanjaypadma for the reply on my request.

ede_pfau
Esteemed Contributor III

No idea if this will be helpful...but what's wrong with a high CPU usage? I've witnessed many events when the CPU spiked to 100%, usually when new AV/IPS signatures were downloaded and mangled. The effect on ongoing traffic was zero. IMHO CPU is used for session setup, management traffic (SNMP etc.) and the GUI. Best practise hints to configure the policies such that a high percentage of traffic is offloaded to the SP(s). You can observe that in the Interface Bandwidth widget. For me, I've paid for the CPUs, let them sweat at 100% for 24/7, no issue.

(of course, yes, it might indicate an issue if it stays that high for a prolonged period)

 

Totally different from this, a high memory usage will put the FGT in danger, or, in other words, it indicates an unhealthy condition. In the worst case, lack of memory will stall all services and throughput. I guess that's why there is a SNMP trap now in recent OS versions when the upper limit is reached.


Ede

"Kernel panic: Aiee, killing interrupt handler!"
Ede"Kernel panic: Aiee, killing interrupt handler!"
Labels
Top Kudoed Authors