Tuesday, July 13, 2010

High CPU Utilization caused by IPS Engine

Over the past few weeks I have been seeing quite a number of CPU spikes for various types of firewalls ranging from FG60B to 310B to 800. In every instance the "ipsengine" process was consuming all available CPU resources on the firewall. After consulting with Fortinet there appears to be an issue related to the current IPS Engine. Ask your SE and they may be able to provide you with a pre-release version of IPS Engine 1.165.

In the meantime if you run into this problem you can run the following command to restart the IPS Engine:

# diag test app ipsmonitor 99

Friday, July 2, 2010

Software Updates

FortiOS
  • 4.0 MR1 Patch 6, Build 205 (Patch 6 was released the day after Patch 5)
FortiAnalyzer
  • 4.0 MR2 Patch 1, Build 208
FortiSwitch
  • 4.0 MR2 GA, Build 355