High CPU by vpnd process (Over 200%) always

[Prabulingam_N1]

Dear All,

In R80.10 FW - No IPSecMobile blade used.

Only FW, IA, APPL,URL, IPS, AV/AB

But CPU constantly n range of 200% by vpnd process.

Customer uses Captive portals (2000+ users were using.

Installed Jumbo Take 112, but still CPU no reduced. Per vpnd files availabel no concrete clue on this.

Anyone had come across on this, can suggest.

Regards,

N.Prabulingam

[Laxi_D]

same issue here.

opened TAC case but no solution yet

[Lucas_Otten]

We had similar.

If I recall Identity Awareness was to blame.
We spun off the IA process to a pair of VM IA gateways and seemed to get rid of that specific symptom anyway.

[Prabulingam_N1]

Thanks Lucas, but I cannot do the same for this customer as they only have 1 FW.

Looking for any info if Latest T_142 can solve this?

Regards,

N.Prabulingam

[Lucas_Otten]

OK. Just wanted to point out that the CP licensing was included as part of the IA licensing.
So the only cost to use were the soft costs of creating VMs.

[JozkoMrkvicka]

Did you check "Super Seven" commands as was presented by Timothy Hall‌ ?

Security Gateway Performance Optimization Excerpt 

[Timothy_Hall]

It is possible that VPND is crashing over and over, please see my troubleshooting recommendations in this similar thread:

R80.10 - VPND process utilizes a large amount of CPU 

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com

[Prabulingam_N1]

Dear Tim/Jozko,

Found this sk113161 and seems quite different to accept.

btw- vpnd process isn't crashing and no core files for vpnd.

Regards, 

N.Prabulingam

[Timothy_Hall]

Anything interesting being logged to $FWDIR/log/vpnd.elg file?

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com

[_Val_]

Please open a support request for this issue

[Prabulingam_N1]

Yes Valeri - I had open Service request and awaiting their response.

Regards, N.Prabulingam