Cybersecurity Forum

This forum is for all security enthusiasts to discuss Fortinet's latest & evolving technologies and to connect & network with peers in the cybersecurity hemisphere. Share and learn on a broad range of topics like best practices, use cases, integrations and more. For support specific questions/resources, please visit the Support Forum or the Knowledge Base.

ChaiRaga
New Contributor

Fortigate 500D can't forward beyond 25 Mbps

Hi, I just tested my firewall 500D, and found out currently it can go beyond 25Mbps.

While if I bypassed, traffic can go until around 40 Mbps. The Internet link capacity is 40 Mbps.

Measurement made using SNMP grapher.

No traffic shaping, no security profile. Just pure fw.

 

 

Any idea how to fix ?

7 REPLIES 7
Andre_Machado_da_Sil
New Contributor

Are you using soft switch ? Move to hardware switch.

[cid:image002.png@01D27BE5.48C82850] http://www.amsinetworks.com

Andre Silva - andre@amsinetworks.com<mailto:andre@amsinetworks.com>
Direto: +55 (21) 3500 8100
RJ: +55 (21) 2223 6446 - SP: +55 (11) 2824 6114
Skype:andre_ams
US/CA: +1 (604) 500 2170
Videoconferencia – Clique Aqui https://portal.starleaf.com/webrtc?target=andre%40amsi.com.br





From: Chairul Ragasyah, Network Analyst via Firewall: [mailto:firewall@lists.fusecommunity.fortinet.com]
Sent: January 18, 2018 12:01 PM
To: firewall@lists.fusecommunity.fortinet.com
Subject: [Firewall:] - Fortigate 500D can't forward beyond 25 Mbps


Hi, I just tested my firewall 500D, and found out currently it can go beyond 25Mbps.

While if I bypassed, traffic can go until around 40 Mbps. The Internet link capacity is 40 Mbps.

Measurement made using SNMP grapher.

No traffic shaping, no security profile. Just pure fw.





Any idea how to fix ?

-----End Original Message-----
-- Andre Machado da Silva - AMS Informatica Tel (21) 2253 5976 - Fax (21) 2233 0561 Novo SITE: http://www.amsi.com.br
-- Andre Machado da Silva - AMS Informatica Tel (21) 2253 5976 - Fax (21) 2233 0561 Novo SITE: http://www.amsi.com.br
ChaiRaga

Nope, mine is hardware switch already.

Andre_Machado_da_Sil

Show me the print screen of the interfaces.

[cid:image002.png@01D27BE5.48C82850] http://www.amsinetworks.com

Andre Silva - andre@amsinetworks.com<mailto:andre@amsinetworks.com>
Direto: +55 (21) 3500 8100
RJ: +55 (21) 2223 6446 - SP: +55 (11) 2824 6114
Skype:andre_ams
US/CA: +1 (604) 500 2170
Videoconferencia – Clique Aqui https://portal.starleaf.com/webrtc?target=andre%40amsi.com.br





From: Chairul Ragasyah, Network Analyst via Firewall: [mailto:firewall@lists.fusecommunity.fortinet.com]
Sent: January 18, 2018 2:03 PM
To: firewall@lists.fusecommunity.fortinet.com
Subject: [Firewall:] - RE: Fortigate 500D can't forward beyond 25 Mbps


Nope, mine is hardware switch already.

-----End Original Message-----
-- Andre Machado da Silva - AMS Informatica Tel (21) 2253 5976 - Fax (21) 2233 0561 Novo SITE: http://www.amsi.com.br
-- Andre Machado da Silva - AMS Informatica Tel (21) 2253 5976 - Fax (21) 2233 0561 Novo SITE: http://www.amsi.com.br
ChaiRaga

this is the ss of interface

PC
New Contributor III

Any chance it is a duplex issue? Maybe do up a quick lab setup with just a computer on either side to reduce variables and copy files through then add back in parts if you get a much higher speed.

From: Chairul Ragasyah, Network Analyst via Firewall: [mailto:firewall@lists.fusecommunity.fortinet.com]
Sent: Thursday, January 18, 2018 11:03 AM
To: firewall@lists.fusecommunity.fortinet.com
Subject: [Firewall:] - RE: Fortigate 500D can't forward beyond 25 Mbps


Nope, mine is hardware switch already.

-----End Original Message-----
ChaiRaga
New Contributor

all interface are 1G full duplex

RolfStan
New Contributor

Hi can you please write the following command in the CLI and post the result.

fnsysctl ifconfig

Best regards

Rolf

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.