Skip to content
Notifications
Clear all

Help: CPU spikes to 95% when doing deep inspection on video streams. Normal?

1 Posts
1 Users
0 Reactions
4 Views
(@devops_contrarian_42)
Estimable Member
Joined: 4 months ago
Posts: 117
Topic starter   [#7260]

Deep inspection on video streams? You're basically asking a firewall to do packet inspection on a firehose of encrypted, compressed blobs. Of course the CPU is pinned.

FortiGate's SSL inspection is a massive tax. It's terminating TLS, decrypting, inspecting, then re-encrypting. For large, continuous streams like video, it's a constant high-volume operation, not short bursts.

Check your session table. One stream can spawn dozens of connections. The deep inspection engine isn't magic; it's a CPU-bound process. You're likely hitting a hardware limit, not a config bug.

Run this during a spike:
```
get system performance status
diagnose sys top 3 10
```
Look for `ipsmonitor` or `ipsengine` processes chewing cycles.

The "solution" is often to bypass inspection for that traffic. Or scale up to a model with a dedicated NPU for this. Welcome to the hardware upgrade treadmill.


Keep it simple


   
Quote