Skip to main content
JohnAgora
New Member
January 20, 2016
Solved

Reduce objetcts

  • January 20, 2016
  • 1 reply
  • 3628 views

I have lots of objects. They are, for example, 

Object_1 - 10.0.0.10

Object_2 - 10.0.1.10

Object_3 - 10.0.2.10

Object_4 - 10.0.3.10

...

Object_n - 10.n.n.10

 

They I put all the objects on a Group, and then on a Firewall Policy.

 

Is there any way to do this better/easier?

I want to avoid having a slow Firewall (I have a 900D).

 

Thanks!

    Best answer by Dave_Hall

    The Fortigate (and FortiOS version) has hard coded limits placed on them in terms of how many items or objects the config can "hold/process".  See the Maximum Values table document (link for 5.4); for the 900D it looks like that limit for firewall objects is 10000.  Keep in mind that Fortinet has designed these big boys to handle/process thousands of items/objects with little to no slow down (IMHO); I think the only real limits you may experience is the GUI/CLI rendering (web browser hardware/OS, etc.) of that many objects in the config.

     

     

     

    1 reply

    Dave_Hall
    Dave_HallAnswer
    New Member
    January 20, 2016

    The Fortigate (and FortiOS version) has hard coded limits placed on them in terms of how many items or objects the config can "hold/process".  See the Maximum Values table document (link for 5.4); for the 900D it looks like that limit for firewall objects is 10000.  Keep in mind that Fortinet has designed these big boys to handle/process thousands of items/objects with little to no slow down (IMHO); I think the only real limits you may experience is the GUI/CLI rendering (web browser hardware/OS, etc.) of that many objects in the config.

     

     

     

    emnoc
    New Member
    January 20, 2016

    I agreed and will add the slowness in the webGUI is typically due to the browser, we've test IE FF CHROME Safari and notice rendering across the board was slower or faster depending o browser type.