429 Status code with message "Too many Request"

Hi @mandeeeps ,

FortiGate’s REST API returns HTTP 429 “Too Many Requests” when a client exceeds the firewall’s built-in rate-limit. Typical default caps are ~100 GET/monitor calls per second and ~30 configuration writes per second. When you hit the limit the appliance blocks further queries from that source IP for a short sliding window and answers with like your mentioned.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Ansible-too-many-attempts/ta-p/344330

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Administrative-lockout-durations-for-FortiGate-API/ta-p/362817

https://docs.fortinet.com/document/fortigate/6.2.7/cookbook/631730/setting-the-administrator-password-retries-and-lockout-time

The limits are fixed in FortiOS and cannot be raised, so the remedies are to:

• Throttle your script (sleep/back-off or cut request bursts).
• Batch queries (ask once for the whole table instead of per-object loops).
• Reuse one session/API key instead of many parallel logins.
• Stagger multiple monitoring systems so their polls do not collide.

BR.

If my answer provided a solution for you, please mark the reply as solved it so that others can get it easily while searching for similar scenarios.

CCIE #68781