Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Prabulingam_N1
Advisor

High CPU by vpnd process (Over 200%) always

Dear All,

In R80.10 FW - No IPSecMobile blade used.

Only FW, IA, APPL,URL, IPS, AV/AB

But CPU constantly n range of 200% by vpnd process.

Customer uses Captive portals (2000+ users were using.

Installed Jumbo Take 112, but still CPU no reduced. Per vpnd files availabel no concrete clue on this.

Anyone had come across on this, can suggest.

Regards,

N.Prabulingam

0 Kudos
10 Replies
Laxi_D
Contributor

same issue here.

opened TAC case but no solution yet

0 Kudos
Lucas_Otten
Explorer

We had similar.

If I recall Identity Awareness was to blame.
We spun off the IA process to a pair of VM IA gateways and seemed to get rid of that specific symptom anyway.

0 Kudos
Prabulingam_N1
Advisor

Thanks Lucas, but I cannot do the same for this customer as they only have 1 FW.

Looking for any info if Latest T_142 can solve this?

Regards,

N.Prabulingam

0 Kudos
Lucas_Otten
Explorer

OK. Just wanted to point out that the CP licensing was included as part of the IA licensing.
So the only cost to use were the soft costs of creating VMs.

0 Kudos
JozkoMrkvicka
Mentor
Mentor

Did you check "Super Seven" commands as was presented by Timothy Hall‌ ?

Security Gateway Performance Optimization Excerpt 

Kind regards,
Jozko Mrkvicka
0 Kudos
Timothy_Hall
Champion
Champion

It is possible that VPND is crashing over and over, please see my troubleshooting recommendations in this similar thread:

R80.10 - VPND process utilizes a large amount of CPU 

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com

Watch My 2023 CPX360 Speech Titled "Max Power
Reloaded: R81+ Gateway Performance Innovations"
0 Kudos
Prabulingam_N1
Advisor

Dear Tim/Jozko,

Found this sk113161 and seems quite different to accept.

btw- vpnd process isn't crashing and no core files for vpnd.

Regards, 

N.Prabulingam

0 Kudos
Timothy_Hall
Champion
Champion

Anything interesting being logged to $FWDIR/log/vpnd.elg file?

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com

Watch My 2023 CPX360 Speech Titled "Max Power
Reloaded: R81+ Gateway Performance Innovations"
0 Kudos
_Val_
Admin
Admin

Please open a support request for this issue

0 Kudos
Prabulingam_N1
Advisor

Yes Valeri - I had open Service request and awaiting their response.

Regards, N.Prabulingam