If some processes use all the available memory, other processes will have no memory available and not be able to function. Depending on their workload, each process will use more or less as needed, usually more in high traffic situations. For example, if network usage is high it will result in high traffic processing on the FortiGate, or if the session setup rate is very low or zero the proxy may be overloaded and not able to do its job.Īs with any system, FortiOS has a finite set of hardware resources such as memory and all the running processes share that memory. The other lines of output, such as average network usage, average session setup rate, viruses caught, and IPS attacks blocked can also help you determine why system resource usage it high. For example, if the system is running low on memory, antivirus scanning will go into failopen mode where it will start dropping connections or bypass the antivirus system. If memory is too full, some processes will not be able to function properly. Memory usage should not exceed 90 percent. The second line of output from get system performance status shows the memory usage. If a process is using most of the CPU cycles, investigate it to determine if it’s normal activity.
This command shows you all the top processes running on the FortiGate unit (names on the left) and their CPU usage. You can get additional CPU related information with the CLI command get system performance top. It is also possible that a hacker has gained access to your network and is overloading it with malicious activity such as running a spam server or using zombie PCs to attack other networks on the Internet. If you see this overloading, you should investigate farther as it’s possible a process, such as scanunitid, is using all the resources to scan traffic, in which case you need to reduce the amount of traffic being scanned by blocking unwanted protocols, configuring more security policies to limit scanning to certain protocols, or similar actions. Normally this should not happen as it shows the FortiGate is overloaded for some reason. This line shows that all the CPU is used up by system processes. However, if your network is running slow you might see something like:ĬPU states: 1% user 98% system 0% nice 1% idle A FortiGate that is doing nothing will look like:ĬPU states: 0% user 0% system 0% nice 100% idle The first line of output shows the CPU usage by category. This command provides a quick and easy snapshot of the FortiGate. To check the system resources on your FortiGate unit, run the following CLI command: They have both a visual gauge displayed to show you the usage. If one of these processes consumes nearly all the resources.Ī quick way to monitor CPU and memory usage is on the System Dashboard using the S ys t e m Resources widgets.
System resources are shared and a number of processes run simultaneously on the FortiGate unit.
0 kommentar(er)
