How to configure fortigate to prevent cpu usability from reaching 80% usage?

[Araujoctr]

Dear colleagues, good afternoon.

In this post I seek information on how to perform a configuration in Fortigate where I can prevent the equipment from reaching 80% CPU usage. This fact has occurred with some frequency lately. I would like advice on how to proceed in this situation. Thank you very much in advance for your attention and understanding.

[msanjaypadma]

Hi @Araujoctr 

Could you please check below article , I hope it will help you.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-CPU-resource-optimization-config...

[Araujoctr]

Thank you msanjaypadma for the reply on my request.

[ede_pfau]

No idea if this will be helpful...but what's wrong with a high CPU usage? I've witnessed many events when the CPU spiked to 100%, usually when new AV/IPS signatures were downloaded and mangled. The effect on ongoing traffic was zero. IMHO CPU is used for session setup, management traffic (SNMP etc.) and the GUI. Best practise hints to configure the policies such that a high percentage of traffic is offloaded to the SP(s). You can observe that in the Interface Bandwidth widget. For me, I've paid for the CPUs, let them sweat at 100% for 24/7, no issue.

(of course, yes, it might indicate an issue if it stays that high for a prolonged period)

Totally different from this, a high memory usage will put the FGT in danger, or, in other words, it indicates an unhealthy condition. In the worst case, lack of memory will stall all services and throughput. I guess that's why there is a SNMP trap now in recent OS versions when the upper limit is reached.