AnsweredHot!Several problems high memory and cpu usage blocking WAN connection after upgrade to 6.2

Page: < 12 Showing page 2 of 2
Author
ISOffice
Bronze Member
  • Total Posts : 60
  • Scores: 2
  • Reward points: 0
  • Joined: 2013/11/25 03:23:57
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/07/02 04:03:51 (permalink)
0
Hi all,
 
We have 2 X 100D Hardware Appliances running firmware version 6.2.0-build0866 in NAT (Flow-based) Mode (HA: Active-Passive).
We too are seeing periodic spikes in CPU usage which occasionally puts the appliance in 'conserve mode'.
However, on running the 'diag sys top' command, I'm seeing a process called 'log_se' as the main culprit of resource usage, rather than 'ipsengine'. I also have an automated task configured to restart the IPS Engine out-of-hours.
I understand the 'log_se' process to be related to logging and the CPU usage spikes when I am viewing Web Filter, Application Control, Local Traffic logs etc. in the GUI. I can't run queries on these logs within the GUI for any length of time in fear of spiking the CPU and pushing the appliance into 'conserve mode'.
I'm wondering if both of these issues are related and it is not only the IPS Engine which is hogging system resources.
I will pose the question to Fortinet Support to get their view on it and will post any developments.
 
Best Regards,
 
John P
#21
ISOffice
Bronze Member
  • Total Posts : 60
  • Scores: 2
  • Reward points: 0
  • Joined: 2013/11/25 03:23:57
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/07/03 01:29:37 (permalink)
0
Hi all,
 
Quick update.
Fortinet Support are insistent that my issue is caused by the known memory leak in the IPS Engine (Bug ID: 0546399) and that it will be rectified in Version 6.2.1.
This version is due for release "mid of July" with the caveat "release dates are as-is and still subject to change".
 
Best regards,
 
John P
#22
Andy Bailey
Bronze Member
  • Total Posts : 54
  • Scores: 4
  • Reward points: 0
  • Joined: 2016/06/27 11:21:22
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/07/03 02:50:44 (permalink)
0
John P,
 
Great your issue has a solution. There are certainly workarounds posted in the forum that can help in the meantime.
 
I've having similar issues with conserve mode and raised a ticket 22nd May. I was originally told the 6.2.1 release would be end of May, then middle of June and then last week 3rd of July (ie today).
 
It seems the info you have given suggests the release date has slipped again and potentially that Fortinet are struggling to fix the issues.
 
Personally I think it's poor that something as serious as this has taken so long to be resolved. Even worse that we are being given dates that keep slipping.
 
Kind Regards,
 
 
Andy.
 
 
#23
Andy Bailey
Bronze Member
  • Total Posts : 54
  • Scores: 4
  • Reward points: 0
  • Joined: 2016/06/27 11:21:22
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/07/03 08:27:35 (permalink)
0
John P and others,
 
I'm told the revised release date is now 8th of July- next Monday. Hope that's a useful update for everyone- or at least someone.
 
Happy to July 4th for everyone in the USA.
 
Kind Regards,
 
 
Andy.
#24
ngocanh87
New Member
  • Total Posts : 2
  • Scores: 0
  • Reward points: 0
  • Joined: 2018/09/05 01:58:41
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/07/04 01:38:01 (permalink)
0
I use FG200E & receive answer
 
Bug is already raised for this issue and developer is working on the same
 
Most probably it will resolve in 6.2.1 which will release at end of the July month.
 
If utilization Impacting on your production network ,Requesting you to rollback to previous working version or 6.0.4 which is more stable version “
#25
mike_dp
Bronze Member
  • Total Posts : 34
  • Scores: 0
  • Reward points: 0
  • Joined: 2016/02/22 12:26:22
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/07/05 13:36:58 (permalink)
0
Just like previous major releases, just update when the new release reaches the 3rd or 4th version. 6.0.5 is now stable with the issue of the WAD process high memory usage. We will wait for at least 6.2.4 to update to 6.2 from 6.0.
#26
ricsend
New Member
  • Total Posts : 3
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/07/10 07:50:46
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/07/10 07:56:15 (permalink)
0
 
Hi,

I Have the same problem today in FG200E (6.2.0), What is the prevision for release of the 6.2.1 ??
#27
Frank Baschin
New Member
  • Total Posts : 2
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/07/12 01:01:02
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/07/12 01:23:33 (permalink)
0
Yesterday we had the same problem.

Temp. solved with disable alle policy services and install the ips reboot script, which was posted in this forum.
It seems that the IPS had a memory leak. Ticket is open 
post edited by Frank Baschin - 2019/07/12 01:55:14
#28
BMS
New Member
  • Total Posts : 3
  • Scores: 0
  • Reward points: 0
  • Joined: 2017/08/09 08:23:19
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/07/14 08:33:26 (permalink)
0
Experiencing the same since upgrading a 61E from 6.0.5 to 6.2.  For me it's the WAD process that send the device into Conserve Mode.  
#29
stuartlawson
New Member
  • Total Posts : 2
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/07/19 21:34:01
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/07/19 21:47:33 (permalink)
0
Was using 6.2.0 for a while. Then, ever since Cloudflare had DNS issues a couple of weeks ago the memory usage on my 201E has gone to memory conserve mode within 5 days after a reboot. Grateful to the people here that posted comments. Did a diag sys top command and found that it was the dnsproxy process that was eating up memory.
 
I went to Security Fabric -> Automation and set up the following to run late every night:
diag test application dnsproxy 99
Memory usage drops back down to 20% and I don't have to monitor it every day now.
post edited by stuartlawson - 2019/07/19 21:48:43
#30
stuartlawson
New Member
  • Total Posts : 2
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/07/19 21:34:01
  • Status: offline
Re: Several problems high memory and cpu usage blocking WAN connection after upgrade to 6. 2019/07/22 19:14:45 (permalink)
0
More: The 6.2.1 update fixed the dnsproxy memory issue.
#31
Page: < 12 Showing page 2 of 2
Jump to:
© 2019 APG vNext Commercial Version 5.5