FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
gpeluso
Staff
Staff
Article Id 293436
Description This article describes how to troubleshoot high CPU usage caused by the IPS process.
Scope All OS.
Solution

Use the command below to bypass the IPS engine.

 

diagnose test application ipsmonitor 5
bypass: enable

 

In this mode, the IPS is running but it is not inspecting traffic.

 

  • If the CPU usage decreases indicates that the volume of traffic inspected is too high for that particular FortiGate model.
  • If the CPU usage is still high indicates a problem with the IPS engine.

 

After proceeding to disable the bypass with the same command:

 

diagnose test application ipsmonitor 5
bypass: disable