Deep inspection on video streams? You're basically asking a firewall to do packet inspection on a firehose of encrypted, compressed blobs. Of course the CPU is pinned.
FortiGate's SSL inspection is a massive tax. It's terminating TLS, decrypting, inspecting, then re-encrypting. For large, continuous streams like video, it's a constant high-volume operation, not short bursts.
Check your session table. One stream can spawn dozens of connections. The deep inspection engine isn't magic; it's a CPU-bound process. You're likely hitting a hardware limit, not a config bug.
Run this during a spike:
```
get system performance status
diagnose sys top 3 10
```
Look for `ipsmonitor` or `ipsengine` processes chewing cycles.
The "solution" is often to bypass inspection for that traffic. Or scale up to a model with a dedicated NPU for this. Welcome to the hardware upgrade treadmill.
Keep it simple