Skip to main content
soma043
soma043
New Member
February 13, 2012
Question

Protocol Options best practices

  • February 13, 2012
  • 3 replies
  • 7845 views
Does anyone have any recommendations on settings in Protocol Options for a device that has AV, IPS, Web Filter (monitor only) and Application Control (monitor only) enabled? Users are complaining that web pages are very slow. Current Protocol Options are: *HTTP/S: Comfort Clients Enabled, Interval 3, Amount 10, Threshold 2, and Enabled Chunked Bypass (what is chunked bypass anyway?) Is the interval too long? The amount too little? What experiences have you had with these settings?

    3 replies

    Fullmoon
    Fullmoon
    New Member
    February 14, 2012
    using default settings of Protocol Options no issue for me so far
    soma043
    soma043Author
    New Member
    February 16, 2012
    I' m guessing the Protocol Options are still sort of a mystery to most. Even when I call in and get a ' level 2' engineer at Fortinet, they are not familiar with the settings and ' have to research it' . My guess is, when tuned correctly, this could help fix the issues our users are complaining about. Since the Fortigate box has been put in (replaced a sonicwall), the users are very unhappy about the speed of web pages. Since most of their apps are hosted in the cloud, they are being very vocal about it.
    rwpatterson
    rwpatterson
    New Member
    February 16, 2012
    How is your DNS set up? Are you using the FGT for a DNS server or proxy? Check the DNS resolution speed. That has a lot to do with ' apparent' Internet speed issues. Grab this small utility and run it. You don' t have to build the custom list just for trouble shooting quickly, but I would recommend it (off hours) for fine tuning your DNS settings. http://www.grc.com/dns/benchmark.htm
    discoveryit
    discoveryit
    New Member
    February 16, 2012
    These are my settings i have used for years that came from the Fortinet Sales Engineer.. They are pretty good and seem to never slow down. (Same for HTTP HTTP FTP) Comfort Client ON Interval 10 Amount 2500 Threshold.. (Depends on your Box) i usually do 5mb.. 1mb for anything smaller than a 60c. Setting the Threshold to high will make your users internet suck...
    Terms & ConditionsAccessibility statement