AnsweredHot!Several problems high memory and cpu usage blocking WAN connection after upgrade to 6.2

Page: < 123 > Showing page 2 of 3
Author
ISOffice
Silver Member
  • Total Posts : 62
  • Scores: 2
  • Reward points: 0
  • Joined: 2013/11/25 03:23:57
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/07/02 04:03:51 (permalink)
0
Hi all,
 
We have 2 X 100D Hardware Appliances running firmware version 6.2.0-build0866 in NAT (Flow-based) Mode (HA: Active-Passive).
We too are seeing periodic spikes in CPU usage which occasionally puts the appliance in 'conserve mode'.
However, on running the 'diag sys top' command, I'm seeing a process called 'log_se' as the main culprit of resource usage, rather than 'ipsengine'. I also have an automated task configured to restart the IPS Engine out-of-hours.
I understand the 'log_se' process to be related to logging and the CPU usage spikes when I am viewing Web Filter, Application Control, Local Traffic logs etc. in the GUI. I can't run queries on these logs within the GUI for any length of time in fear of spiking the CPU and pushing the appliance into 'conserve mode'.
I'm wondering if both of these issues are related and it is not only the IPS Engine which is hogging system resources.
I will pose the question to Fortinet Support to get their view on it and will post any developments.
 
Best Regards,
 
John P
#21
ISOffice
Silver Member
  • Total Posts : 62
  • Scores: 2
  • Reward points: 0
  • Joined: 2013/11/25 03:23:57
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/07/03 01:29:37 (permalink)
0
Hi all,
 
Quick update.
Fortinet Support are insistent that my issue is caused by the known memory leak in the IPS Engine (Bug ID: 0546399) and that it will be rectified in Version 6.2.1.
This version is due for release "mid of July" with the caveat "release dates are as-is and still subject to change".
 
Best regards,
 
John P
#22
Andy Bailey
Silver Member
  • Total Posts : 64
  • Scores: 4
  • Reward points: 0
  • Joined: 2016/06/27 11:21:22
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/07/03 02:50:44 (permalink)
0
John P,
 
Great your issue has a solution. There are certainly workarounds posted in the forum that can help in the meantime.
 
I've having similar issues with conserve mode and raised a ticket 22nd May. I was originally told the 6.2.1 release would be end of May, then middle of June and then last week 3rd of July (ie today).
 
It seems the info you have given suggests the release date has slipped again and potentially that Fortinet are struggling to fix the issues.
 
Personally I think it's poor that something as serious as this has taken so long to be resolved. Even worse that we are being given dates that keep slipping.
 
Kind Regards,
 
 
Andy.
 
 
#23
Andy Bailey
Silver Member
  • Total Posts : 64
  • Scores: 4
  • Reward points: 0
  • Joined: 2016/06/27 11:21:22
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/07/03 08:27:35 (permalink)
0
John P and others,
 
I'm told the revised release date is now 8th of July- next Monday. Hope that's a useful update for everyone- or at least someone.
 
Happy to July 4th for everyone in the USA.
 
Kind Regards,
 
 
Andy.
#24
ngocanh87
New Member
  • Total Posts : 2
  • Scores: 0
  • Reward points: 0
  • Joined: 2018/09/05 01:58:41
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/07/04 01:38:01 (permalink)
0
I use FG200E & receive answer
 
Bug is already raised for this issue and developer is working on the same
 
Most probably it will resolve in 6.2.1 which will release at end of the July month.
 
If utilization Impacting on your production network ,Requesting you to rollback to previous working version or 6.0.4 which is more stable version “
#25
mike_dp
Bronze Member
  • Total Posts : 34
  • Scores: 0
  • Reward points: 0
  • Joined: 2016/02/22 12:26:22
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/07/05 13:36:58 (permalink)
0
Just like previous major releases, just update when the new release reaches the 3rd or 4th version. 6.0.5 is now stable with the issue of the WAD process high memory usage. We will wait for at least 6.2.4 to update to 6.2 from 6.0.
#26
ricsend
New Member
  • Total Posts : 3
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/07/10 07:50:46
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/07/10 07:56:15 (permalink)
0
 
Hi,

I Have the same problem today in FG200E (6.2.0), What is the prevision for release of the 6.2.1 ??
#27
Frank Baschin
New Member
  • Total Posts : 2
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/07/12 01:01:02
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/07/12 01:23:33 (permalink)
0
Yesterday we had the same problem.

Temp. solved with disable alle policy services and install the ips reboot script, which was posted in this forum.
It seems that the IPS had a memory leak. Ticket is open 
post edited by Frank Baschin - 2019/07/12 01:55:14
#28
BMS
New Member
  • Total Posts : 3
  • Scores: 0
  • Reward points: 0
  • Joined: 2017/08/09 08:23:19
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/07/14 08:33:26 (permalink)
0
Experiencing the same since upgrading a 61E from 6.0.5 to 6.2.  For me it's the WAD process that send the device into Conserve Mode.  
#29
stuartlawson
New Member
  • Total Posts : 2
  • Scores: 4
  • Reward points: 0
  • Joined: 2019/07/19 21:34:01
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/07/19 21:47:33 (permalink)
5 (1)
Was using 6.2.0 for a while. Then, ever since Cloudflare had DNS issues a couple of weeks ago the memory usage on my 201E has gone to memory conserve mode within 5 days after a reboot. Grateful to the people here that posted comments. Did a diag sys top command and found that it was the dnsproxy process that was eating up memory.
 
I went to Security Fabric -> Automation and set up the following to run late every night:
diag test application dnsproxy 99
Memory usage drops back down to 20% and I don't have to monitor it every day now.
post edited by stuartlawson - 2019/07/19 21:48:43
#30
stuartlawson
New Member
  • Total Posts : 2
  • Scores: 4
  • Reward points: 0
  • Joined: 2019/07/19 21:34:01
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/07/22 19:14:45 (permalink)
5 (1)
More: The 6.2.1 update fixed the dnsproxy memory issue.
#31
Vinicius
New Member
  • Total Posts : 2
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/08/29 05:04:00
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/08/29 05:10:46 (permalink)
0
Hello,
Anyone having this issue on 6.2.1?
Every week i must restart those cause they run into conserve mode.
Already set-memory-threshold-green to 89 and red to 90.
 
I'm running 6.2.1 on a 30E and on 60E.
 
#32
Break16
New Member
  • Total Posts : 3
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/05/14 00:22:09
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/09/01 23:15:41 (permalink)
0
Vinicius
Hello,
Anyone having this issue on 6.2.1?
Every week i must restart those cause they run into conserve mode.
Already set-memory-threshold-green to 89 and red to 90.
 
I'm running 6.2.1 on a 30E and on 60E.
 




has anyone had any experience with version 6.2.1? is this problem now 100% fixed? are we safe to update to 6.2.1?
#33
zaphod
Bronze Member
  • Total Posts : 25
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/08/19 01:42:28
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/09/03 05:20:54 (permalink)
0
i manage about 25 different Fortis on different locations, have most of them updated to 6.2.1 and no more conserve or memory issues. 
But my Models are minimum 60E or higher... maybe 30E is not the best model for 6.2.x.. 
 
 
 
#34
Dave Hall
Expert Member
  • Total Posts : 1574
  • Scores: 170
  • Reward points: 0
  • Joined: 2012/05/11 07:55:58
  • Location: Canada
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/09/03 10:05:31 (permalink) ☄ Helpfulby ISOffice 2019/10/17 03:27:27
0
This is by no means a fix, but a work-around is to have the fgt perform a daily reboot. 
 
config system global
set daily-restart enable
set restart-time <time value>
end



NSE4/FMG-VM64/FortiAnalyzer-VM/5.4/6.0 (FWF40C/FW92D/FGT200D/FGT101E)/ FAP220B/221C
#35
Aron1
New Member
  • Total Posts : 6
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/09/03 08:58:35
  • Location: Roseville, MN
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/09/03 10:14:26 (permalink)
0
Vinicius
Hello,
Anyone having this issue on 6.2.1?
Every week i must restart those cause they run into conserve mode.
Already set-memory-threshold-green to 89 and red to 90.
 
I'm running 6.2.1 on a 30E and on 60E.
 


I have a client with 12 forti FW's. Upgraded 4 of them to 6.2.1. 2 were 5.6.7 up to 6.2.1, the other 2 6.2.0 to 6.2.1. The 2 that were running 6.2.0 and having memory issues no longer are having memory issues. On those two, the applincation that was causing the mem issue was wad on one unit and ipsmonitor on the other. Restarting those apps with the diag test app **** 99 command is only a temporary fix from what I have seen.
 
While they are not seeing the memory issue again, I ran into an SSL inspection issue with 6.2.1 on an online application they are running. I may be opening a Case with Fortinet on that one soon.

Ignotum per ignotius...
#36
FortiET
New Member
  • Total Posts : 3
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/09/25 02:27:30
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/09/25 02:36:46 (permalink)
0
We have Fortigate 200 E  - cluster.  Today I ran into the Conserve mode.  diagnose test application wad 99 fixed the problem at once.  But Fortinet - any updates about fix for this problem ?
#37
zaphod
Bronze Member
  • Total Posts : 25
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/08/19 01:42:28
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/09/25 02:51:29 (permalink)
0
FortiET
We have Fortigate 200 E  - cluster.  Today I ran into the Conserve mode.  diagnose test application wad 99 fixed the problem at once.  But Fortinet - any updates about fix for this problem ?


have you updated to 6.2.1 ?
 
#38
FortiET
New Member
  • Total Posts : 3
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/09/25 02:27:30
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/09/26 06:22:22 (permalink)
0
Sorry, Yes, I forgot to write our version. We have run 6.2.1  Build 0932 for quite some weeks.
 
#39
zaphod
Bronze Member
  • Total Posts : 25
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/08/19 01:42:28
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/09/26 06:38:48 (permalink)
0
Dave Hall
This is by no means a fix, but a work-around is to have the fgt perform a daily reboot. 
 
config system global
set daily-restart enable
set restart-time <time value>
end






hm, dont have a problem with 6.2.1 but above i have quoted a workaround from other user here.
 
i thought this memory consumption problem is fixed with 6.2.1 but seems not...
 
have you upgraded from 5.x to 6.2.1 or from 6.x to 6.2.1?
 
greets
 
zaphod
 
 
#40
Page: < 123 > Showing page 2 of 3
Jump to:
© 2020 APG vNext Commercial Version 5.5