Memory usage increases everyday after upgrading to 7.6.0

[vnkhwazi]

Hello Guys.

We have two Fortigate 201F firewalls in HA setup.  Recently, we upgraded the firmware to 7.6.0 and evrything has been working fine, lately, we have noted that the memory usage has been going up everyday and currently we are at 82% and soon we might start having the firewalls go to conserve mode. Is this a bug in the firmware?  how do we make the memory usage to go down?

Regards.

[nejcs]

Welcome to the club. It's the same with 7.4.5. There have been massive memory leaks in the whole 7.4.x branch for about a year now. I'm beginning to give up on Fortinet. I sold my stocks today. 
Try to switch off IPS as much as possible (small database, as few updates as possible), this mitigated the problem a little, but not really. Also configure automation stitches to restart ips service, set ips to pass-trough mode in conserve and restart fortigate if it enters conserve. 

[sjoshi]

Hi,

First thing is to figure out which daemon is spiking
diag sys top

get sys perf status >> will give you the total usage

diag debug crashlog read >> will give you if any daemon is crashing

optimize memory
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-optimize-the-Memory-consumption/ta-...

[nejcs]

I completely agree, but I think Fortinet should do it, not their clients, also known as beta testers. 

[hbac]

Hello @vnkhwazi,

7.6 is still new and yes, it has memory issues. This is one of them https://community.fortinet.com/t5/FortiGate/Technical-Tip-WAD-wad-config-notify-process-consumes-hig...

Did you check which process is causing high memory usage? https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-How-to-do-initial-troubleshooting-of...

Currently, 7.0.10 is considered the most stable version: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Recommended-Release-for-FortiOS/ta-p/22717...

Regards, 

[DPadula]

Hi wnkhwazi,

Once you confirm which process is causing the high memory utilization according to the community links provided by my colleagues you can use the following feature to automatically restart the WAD process, in case it is the root cause of the issue. 

Technical Tip: Use a new FortiOS mechanism to automatically restart WAD workers

In case it is not WAD, you can use automated stitches as mentioned.