What you’re seeing
- The FortiGate dashboard or log reports 'The system has entered conserve mode'.
- Websites fail to load, web filtering blocks everything, or SSL inspection stops working.
- Remote users cannot connect to the VPN, or existing VPN sessions drop.
- Memory usage on the firewall sits at 80 to 90 percent or higher.
- A reboot fixes things for a few days or weeks, then the problem returns.
Common causes
Every environment is different, but these are the causes our engineers find most often:
- Smaller FortiGate models have limited RAM, and newer FortiOS versions use more memory than the hardware was sized for.
- Antivirus, IPS, web filtering and SSL deep inspection are all enabled on a unit too small to run them together.
- A firmware bug causes a memory leak in a specific process, such as the IPS engine or web filter daemon.
- A spike in sessions from a compromised device, a scan or heavy traffic exhausts memory.
- Extensive logging to local disk or memory consumes resources the firewall needs for traffic.
- The number of users and devices has grown beyond what the model was purchased for.
Why it matters
Conserve mode is the firewall protecting itself by cutting back, and that usually means internet, VPN or security inspection stops working for the whole office. In some configurations the unit lets traffic pass without scanning, which quietly removes protection, while in others it blocks new connections entirely. Either way the business is exposed or offline. Relying on reboots to recover means unplanned outages during work hours, and the underlying cause, whether a bug, an undersized unit or suspicious traffic, stays unaddressed.
How AskTechGurus fixes it
Skip the trial and error. A certified engineer works on your actual system, finds the root cause, and fixes it properly.
Tell us what’s happening
Submit a ticket in about two minutes. Paste the error, describe what changed, and pick your tier. No charge to submit.
A certified engineer diagnoses it
A vetted, US-based systems engineer claims your ticket, usually within minutes during business hours, and investigates over a secure remote session you can watch and end at any time.
Fixed and verified with you
The engineer resolves the root cause and confirms with you that it’s working. You don’t just get a workaround, and you get a plain-English summary of what was wrong.
Pay only when it’s resolved
Fixed price from $99, invoiced only after you approve the fix. If it isn’t resolved, you don’t pay.
Frequently asked questions
Does conserve mode mean we've been hacked?
Not usually. It is most often caused by memory limits or a firmware bug, but a sudden surge in traffic from an infected device can trigger it, so it is worth ruling that out.
Do we need a bigger firewall?
Possibly, but not always. Sometimes adjusting which security features run, or moving to a more stable firmware release, brings memory use back under control.
How can AskTechGurus help?
A certified US engineer reviews the firewall's resource use, logs and firmware through a remote secure session. Service starts at $99 and you pay only when the FortiGate is stable again.