Skip to main content
AlexImpact
New Member
October 16, 2013
Question

Slow video streaming

  • October 16, 2013
  • 14 replies
  • 16043 views
Hi, I need your help, I have 2 fortinet 200b in HA and a 100Mb Internet connection. But watching videos online often lag really bad, stopping every time to buffer, watching a 10 minutes video is like 30 minutes of buffering, watching the same video from the same source on a much slower connection like at home is no problems at all. Can anyone help? most documents I found online are to restrict video streaming, nothing on how to speed it up. But the business I work for need to be able to reliably watch these videos. Thanks

    14 replies

    rwpatterson
    New Member
    October 16, 2013
    Welcome to the forums. A quick test: Turn one of the HA units off. I found in v4.2.13 (I think) that having the units in A-A slowed down throughput. I never put a ticket in, just switched to A-P mode instead.
    Dave_Hall
    New Member
    October 16, 2013
    Hi Alex. Welcome to the forums. Use the search link (above) and look for youtube slow/stalled connection issues. You did not indicate which firmware the 200Bs are running. But on 4.0 MR3 (and may be earlier) firmware, slow or stalled video streaming may be related to how the fgt buffers incoming " files" (if the fgt is in proxy mode) and/or if disk caching is enabled (don' t have fgt in HA so don' t know if disk caching is even allowed in HA). In 4.0 MR3 you will want to look at Protocol Options (under Policy->Policy->Protocol Options), in 5.0 I think the file size option is controlled by DLP. Edit: sort of an after thought, in additional to what Bob pointed out and what I wrote (above)...guess we are all assuming there is nothing wrong with the WAN connection, but you should rule that out as being part of the problem (e.g. MTU, duplex/speed mismatch, etc.).
    AlexImpact
    New Member
    October 16, 2013
    I' m running 4.0 MR3 in Actives-Actives mode I may try to change to Actives-Passives to see if it help, Can I do this change live without affecting users? I also add the URL of the website from witch we want to stream into the exempt list of the cache Under Policy/Policy/Protocols Options, under HTTP I have Oversised File/EMail to Pass and threshold I changed to 1 to test (was 10)
    rwpatterson
    New Member
    October 16, 2013
    Switching modes will have negligible affect on the users. Some tunnels may drop, but that is only a maybe.
    AlexImpact
    New Member
    October 16, 2013
    Changing from A-A to A-P had no effect, I must add, that it' s not video from youtubes that are problematics, it' s video from instatscout.com, which use JW Player to stream video. so far nothing did help
    Maik
    New Member
    October 17, 2013
    Do you use " comfort clients" in your protocol options? what values?
    Dave_Hall
    New Member
    October 17, 2013
    I must add, that it' s not video from youtubes that are problematics, it' s video from instatscout.com, which use JW Player to stream video. so far nothing did help
    If it is just one site and one that is " critical" to your company and is a trusted site, you can try creating a separate fw policy for that site only with no UTM features enabled...just as a test, to help in troubleshooting this problem. (Create a fqdn for instatscout.com and use that for the dest address.) Move the fw policy up in the fw chain so it is triggered.
    donnat
    New Member
    October 17, 2013
    Hi, For me: config webfilter content-header edit 1 config entries edit " video/.*" set action exempt next edit " audio/.*" set action exempt next end set name " Liste-content-header" next end
    AlexImpact
    New Member
    October 17, 2013
    I tried donnat suggestion, didn' t help, tried to create a separate fw policy as dave suggest, still no help, I' m starting to think it may be something with my inet provider, To answer Maik question, I dont use comfort clients, should I? If I was to set comfort client, should I do it under HTTP for video? This website is somewat critical for our business, we are a professionnal soccer team and scouting agents use this to scout new prospect players. Thanks everyone for trying to help me, if you have any others suggestion for me to try, please go ahead.
    Dave_Hall
    New Member
    October 17, 2013
    I tried donnat suggestion, didn' t help, tried to create a separate fw policy as dave suggest, still no help, I' m starting to think it may be something with my inet provider,
    Have you performed any troubleshooting steps to rule out any possible MTU/duplex/speed mismatch issues on the WAN connection? Is the WAN connection on DSL?
    AlexImpact
    New Member
    October 17, 2013
    My connection isn' t a DSL, it' s fiber optics, I actually do have 3 connection to the internet, I have 1 60Mb and 2 30Mb connection comming in the fortigates units. I can' t find where in the fortigate I can check the MTU/Duplex/Speed
    rwpatterson
    New Member
    October 17, 2013
    diagnose hardware deviceinfo nic <port name>
    That' s from memory. It may be a bit different.
    ede_pfau
    SuperUser
    SuperUser
    October 18, 2013
    Example:
     gate # diag hard dev nic wan1  Description             sundance Ethernet driver1.01+LK1.21                       chip_id                 6                                                            IRQ                     5                                                                System_Device_Name      wan1                                                Current_HWaddr          00:09:0f:78:7f:30                                      Permanent_HWaddr        00:09:0f:78:7f:30                                     State                   up                                                             Link                    up                                                              Speed                   100                                                            Duplex                  full                                                          Rx_Packets              63203575                                                   Tx_Packets              56516425                                                   Rx_Bytes                49156727147                                                  Tx_Bytes                7916560910                                                   Collisions              0                                                          Rx_Missed_Errors        0                                                     Tx_Carrier_Errors       0                                                      
    Also, have you tried to circumvent the Fortigate by using a PC directly connected to your fiber? Maybe the problem is on the line or with your ISP.
    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT