For When You Can't Have The Real Thing
[ start | index | login ]
start > FortiOS > 5.4 > CPU is pinned

CPU is pinned

Created by dave. Last edited by dave, 9 days ago. Viewed 17 times. #3
[diff] [history] [edit] [rdf]
labels
attachments
(2018-06-11)

Problem

CPU on Fortigate is maxed out for a long period of time (hours, days).

Solution

Identify the process using the CPU:

get system performance top

It should be obvious which process is using all the CPU. Note the PID of the offending process.

If it is sslvpn, it is reasonably safe to restart (although connected clients may get kicked off -- so List SSLVPN Users first!):

diag sys kill 11 $PID

If it isn't sslvpn, it may be safer to reboot the firewall.

Commentary

This problem is not uncommon on 5.4.x, especially 5.4.6.

no comments | post comment
This is a collection of techical information, much of it learned the hard way. Consider it a lab book or a /info directory. I doubt much of it will be of use to anyone else.

Useful:


snipsnap.org | Copyright 2000-2002 Matthias L. Jugel and Stephan J. Schmidt