- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Memory usage increases everyday after upgrading to 7.6.0
Hello Guys.
We have two Fortigate 201F firewalls in HA setup. Recently, we upgraded the firmware to 7.6.0 and evrything has been working fine, lately, we have noted that the memory usage has been going up everyday and currently we are at 82% and soon we might start having the firewalls go to conserve mode. Is this a bug in the firmware? how do we make the memory usage to go down?
Regards.
- Labels:
-
FortiGate
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Welcome to the club. It's the same with 7.4.5. There have been massive memory leaks in the whole 7.4.x branch for about a year now. I'm beginning to give up on Fortinet. I sold my stocks today.
Try to switch off IPS as much as possible (small database, as few updates as possible), this mitigated the problem a little, but not really. Also configure automation stitches to restart ips service, set ips to pass-trough mode in conserve and restart fortigate if it enters conserve.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
First thing is to figure out which daemon is spiking
diag sys top
get sys perf status >> will give you the total usage
diag debug crashlog read >> will give you if any daemon is crashing
optimize memory
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-optimize-the-Memory-consumption/ta-...
Salon Raj Joshi
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I completely agree, but I think Fortinet should do it, not their clients, also known as beta testers.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello @vnkhwazi,
7.6 is still new and yes, it has memory issues. This is one of them https://community.fortinet.com/t5/FortiGate/Technical-Tip-WAD-wad-config-notify-process-consumes-hig...
Did you check which process is causing high memory usage? https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-How-to-do-initial-troubleshooting-of...
Currently, 7.0.10 is considered the most stable version: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Recommended-Release-for-FortiOS/ta-p/22717...
Regards,
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi wnkhwazi,
Once you confirm which process is causing the high memory utilization according to the community links provided by my colleagues you can use the following feature to automatically restart the WAD process, in case it is the root cause of the issue.
Technical Tip: Use a new FortiOS mechanism to automatically restart WAD workers
In case it is not WAD, you can use automated stitches as mentioned.