Fortigate CPU utilization

a few times i came across a Fortinet firewall with a stuck ips process, it mostly occurring as a bug when working with the policy base, when this happens there are two ways of solving the issue,
first - reboot the machine.
second - find the process the causing the problem and "Kill" it, this may take a few minutes of work but more appropriate for production networks that cant afford the long down-time caused by a full reboot,
Seeing as a fortinet firewall is based on a linux OS, there is a simple way of monitoring witch process is running and witch "eats" the most of your CPU resources at a specific moment.

note that This type of debug is done via the command line of the Forti,
in order to view the status of the firewall all we need is to run
FGT# diagnose sys top

for example :
FGT # diagnose sys top
Run Time:  5 days, 12 hours and 11 minutes
31U, 14S, 54I; 249T, 73F, 54KF
          newcli     1175      R       0.9     2.8
       ipsengine     1065      S <     0.0    13.4
       ipsengine     1064      S <     0.0    10.3

To stop one of the processes use
FGT# diagnose sys kill 11 (pid)
If we need to stop one of the IPS engine process it will be
FGT# diagnose sys kill 11 1065    

There is also a way to restart the IPS engine, to do so use the
FGT # diagnose test application ipsengine 99

After the restart the memory will jump to full usage to fix it clear the restart log.
FGT # diagnose test application ipsengine 4

P.S, IPS Engine Test Usage:
1: Display IPS engine information
2: Toggle IPS engine enable/disable status
3: Display restart log
4: Clear restart log
5: Toggle bypass status
6: Submit attack characteristics now
99: Restart all IPS engines and monitor

Hope this post was helpful, If it was please consider a donation:
BTC Address: 1CnyMpjd1RntRDxSus2hu2aDMyzL4Kj29N
LTC Address: LUqrKbzGihTU2GEnL3EwsuuLHCsxCJMdtR


  1. Thanks for the diag test app command! Much better to restart a process than the whole firewall.

    1. Agreed, I always prefer solving the actual problem rather than causing a long downtime for a temporary one..

  2. For me it was ipsmonitor who had to be restarted, but thanks for the tip! :D

  3. Thanks, but how do I find out the process that eaten up the utilization?

  4. I got it, thanks.

  5. Very nice post, I certainly love this website, keep on it. :)

  6. System builders also used to favor the AMD CPUs since there were higher margins in systems built with AMD chips. DDR4 VS DDR3 RAM: Know The differences

  7. Excellent and very exciting site. Love to watch. Keep Rocking. In this game sims 4 cheats you can fitness, it's available on Xbox one.

  8. I can see that you are an expert at your field! I am launching a website soon, and your information will be very useful for me.. Thanks for all your help and wishing you all the success in your business. buy real instagram likes from the uk

  9. I use only high quality materials - you can see them at: scrap Pentium pro CPU

  10. The hardware on a motherboard encourages the correspondence between the entirety of the gadgets in the computer, making them as basic to a framework's presentation as things, for example, the CPU or memory. Lian Li Lancool II

  11. At the point when you enlist into an online computer technology school you will have the option to pick various courses that will help you in your vocation as an expert computer technologist. USB duplicator

    1. Sophia - so how does a flash drive duplicator work into your sentence? It doesn't really make sense to be honest. But I clicked it anyway and found this duplicator system that creates read-only flash drives. I've tried on my own to do this, but you can't because it's a hardware chip thing, but these guys (nexcopy) figured it out. Sweet, right!

  12. yes you might be crazy but your post is owsum
    cheap cloud render farm

  13. PCs, once anticipated to be claimed by a simple small bunch of people, are wherever these days. In the event that you are an understudy a PC is for all intents and purposes a need. Going with the ever-expanding ubiquity of the PC is a plenty of contraptions and innovative progressions. wireless headsets for teaching online