Reduce objetcts

2 replies
3697 views

I have lots of objects. They are, for example,

Object_1 - 10.0.0.10

Object_2 - 10.0.1.10

Object_3 - 10.0.2.10

Object_4 - 10.0.3.10

...

Object_n - 10.n.n.10

They I put all the objects on a Group, and then on a Firewall Policy.

Is there any way to do this better/easier?

I want to avoid having a slow Firewall (I have a 900D).

Thanks!

Dave_HallAnswer

New Member

The Fortigate (and FortiOS version) has hard coded limits placed on them in terms of how many items or objects the config can "hold/process". See the Maximum Values table document (link for 5.4); for the 900D it looks like that limit for firewall objects is 10000. Keep in mind that Fortinet has designed these big boys to handle/process thousands of items/objects with little to no slow down (IMHO); I think the only real limits you may experience is the GUI/CLI rendering (web browser hardware/OS, etc.) of that many objects in the config.

Dave_HallAnswer

New Member

The Fortigate (and FortiOS version) has hard coded limits placed on them in terms of how many items or objects the config can "hold/process". See the Maximum Values table document (link for 5.4); for the 900D it looks like that limit for firewall objects is 10000. Keep in mind that Fortinet has designed these big boys to handle/process thousands of items/objects with little to no slow down (IMHO); I think the only real limits you may experience is the GUI/CLI rendering (web browser hardware/OS, etc.) of that many objects in the config.

emnoc

New Member

I agreed and will add the slowness in the webGUI is typically due to the browser, we've test IE FF CHROME Safari and notice rendering across the board was slower or faster depending o browser type.

Sign up

Login with SSO

Login to the community

Login with SSO