Skip to main content
Alternative
Alternative
New Member
February 26, 2025
Question

Slowww VPN SSL

  • February 26, 2025
  • 1 reply
  • 439 views

Hi !

I am experiencing speed issues with SSL VPNs. I can't exceed 20MB/s on gigabit lines during SMB transfers. I've run some not-so-great iperf3 tests about 25MB/s (200Mbits/s).

I have tested from several sites towards to several sites. Still the same. It doesn't matter the model of Fortinet (200, 60F, 80F).

I(ve tried with enabling DTLS on Fortinet and in Forticlient (https://community.fortinet.com/t5/FortiGate/Technical-Tip-Using-DTLS-to-improve-SSL-VPN-performance/ta-p/193881). It remains the same.

 

Any idea ?

1 reply

MZBZ
Staff
MZBZ
Staff
February 28, 2025

Long story short: Switch to IPSEC IKEv2 and if it does not improve open a TAC case!
If you want to dig deeper, perform a-z packet capture on the endpoint, server and all important nodes in between and perform TCP analysis (MSS, retransmission, window size and ...)

Terms & ConditionsAccessibility statement
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!