Skip to main content
OneSquad
New Member
February 6, 2026
Question

Fortigate 40F behind Draytek 3912 performance issues

  • February 6, 2026
  • 3 replies
  • 312 views

Hi everyone,

 

We’re running into consistent performance and internet connectivity issues when using a Fortigate 40F firewall behind a Draytek Vigor 3912 router.

 

The WAN connection (with a dedicated public IP address) is managed and delivered by a third-party IT provider. So far, they’ve only been able to make the setup functional by using a double NAT configuration.

Unfortunately, we don’t have administrative access to their VPN router, meaning all network and routing configurations can only be modified on our Fortigate side. This limits our ability to optimize or troubleshoot the setup beyond our local network.

 

Has anyone experienced similar performance degradation or connectivity problems in a comparable setup (Fortigate behind Draytek / double NAT scenario)?
Any advice on best practices or alternative configurations that could help improve throughput, latency, or overall stability would be greatly appreciated.

 

Setup overview:

  • ISP / third-party provides WAN and dedicated IP

  • Draytek Vigor 3912 (managed by third party)

  • Fortigate 40F (internal firewall / our control)

  • Double NAT currently in use

 

Thanks in advance for any insights or troubleshooting tips.

3 replies

AEK
SuperUser
SuperUser
February 6, 2026

Hi

What is the speedtest difference behind the firewall and directly behind the router?

AEK
OneSquad
OneSquadAuthor
New Member
February 7, 2026

The speed test results vary by moment, likely due to the server being used. We anticipate loading and performance issues with websites. Initially, we encountered problems with HTTPS domains, but these issues are random.

 

The internal infrastructure is functional.

 

Using a regular 5G mobile router is without any issues.

AEK
SuperUser
SuperUser
February 8, 2026

So I understand there is no evidence that FGT is causing the performance issue.

First thing to do is try isolate the issue at least to know which part is behind the bottleneck.

AEK
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!