Skip to main content
satoom1
satoom1
Explorer
June 24, 2024
Solved

What is the maximum number of concurrent authenticated users supported by FortiGate?

  • June 24, 2024
  • 2 replies
  • 3169 views

When enabling the Explicit Proxy feature on a FortiGate 40F(ver6.4.11) and performing several thousand Kerberos authentication tests from a test tool, 1001 users appeared in the authentication list on the web management console, but no additional users were shown beyond that.

 

We had not considered the configuration or limitations regarding the number of concurrent authentications, so we researched the related settings and found the following website.

 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Limiting-concurrent-user-authentication/ta-p/199277

https://community.fortinet.com/t5/FortiGate/Technical-Note-Limiting-concurrent-user-authentication/ta-p/190373

 

 

 

When we checked the configuration on the tested FortiGate, the value of "policy-auth-concurrent" was set to 0.

 

So far, we have not been able to obtain information on the maximum number of concurrent authentications possible.

 

Please tell me the maximum number of concurrent authenticated users supported by FortiGate.

If the maximum number of concurrent authenticated users varies by device model, I would like to know how to check the maximum number of concurrent authenticated users for each model.

 

FortiGate 

Best answer by AlexC-FTNT

Usually, if the value is not listed in the max values table or documented elsewhere, the limitation is dictated by the amount of resources available at that moment, in that unit (memory). Also to consider that display issues may arise for high numbers, so for performance optimization, in GUI the results might be limited to a certain amount of characters, or time to load the page.

Is there actually a problem that you are facing? 
Because if you are simply testing, I would suggest to use one of the supported firmware versions (7.0+)

2 replies

jintrah_FTNT
Staff
jintrah_FTNT
Staff
June 24, 2024

Hi,

 

Max values for a model on a specific firmware could be found here docs.fortinet.com/max-value-table

You could also find some info regarding the same here Technical Note: FortiGate maximum values ... - Fortinet Community

 

Best regards,

Jin

    satoom1
    satoom1Author
    Explorer
    June 24, 2024

    Thank you for your response.

    I would like to know the maximum number of users that can simultaneously perform Kerberos authentication on FortiGate when used as a proxy.
    Could you please tell me the name of the parameter where this value is configured?

    AlexC-FTNT
    Staff
    AlexC-FTNTAnswer
    Staff
    June 24, 2024

    Usually, if the value is not listed in the max values table or documented elsewhere, the limitation is dictated by the amount of resources available at that moment, in that unit (memory). Also to consider that display issues may arise for high numbers, so for performance optimization, in GUI the results might be limited to a certain amount of characters, or time to load the page.

    Is there actually a problem that you are facing? 
    Because if you are simply testing, I would suggest to use one of the supported firmware versions (7.0+)

      Terms & ConditionsAccessibility statement