High memory usage for Fortinet

Vendor

Fortinet

Description

Indeni will alert if the memory utilization of a device is above a high threshold. If the device has multiple memory elements, each will be inspected separately and alert for.

Remediation Steps

Determine the cause for the high memory usage of the listed elements.

1. Login via https to the Fortinet firewall and go to menu System > Dashboard > Status. Look at the system resources widget to review the current Memory utilization graph.

2. Login via ssh to the Fortinet firewall and run the FortiOS command "diagnose hardware sysinfo memory" which provides information about current memory usage.

3. Check if the unit is dealing with high traffic volume or with connection pool limits.

4. Check if the Fortinet firewall is in "conserve mode" state by running the FortiOS command "diagnose hardware sysinfo conserve". For more information review the following Fortinet guides:

- http://kb.fortinet.com/kb/viewContent.do?externalId=FD33103

- http://kb.fortinet.com/kb/viewContent.do?externalId=11076

5. If the problem persists, contact Fortinet Technical support at https://support.fortinet.com/ for further assistance.

How does this work?

Indeni uses the built-in Fortinet "get system performance status" command to retrieve the device memory utilization.

Why is this important?

Indeni uses the built-in Fortinet "get system performance status" command to retrieve the device memory utilization.

Without Indeni how would you find this?

An administrator could login and manually run the command via CLI, check the system resources widget via the GUI, enable SNMP, configure a syslog server for a log message every 5 minutes containing the utilization, or use Fortinet FortiAnalyzer.


View Source Code