Technical Tip: How to troubleshoot when Log Forwarding sending Jumbo packet to Destination

[Nur]

Description	This article describes how to troubleshoot when Log Forwarding sends a Jumbo packet to the Destination: FortiGate -> FortiAnalyzer (Log Forward) -> FortiGate -> Destination.
Scope	FortiAnalyzer, FortiGate.
Solution	X.X.1.7: FortiAnalyzer IP. X.X.8.35: Destination IP. Based on the packet capture, the FortiAnalyzer is sending a Jumbo Frame to the destination. When the traffic sends packets larger than the Maximum Transmission Unit (1500bytes), the packet needs to be fragmented the packet into small pieces. The packet does not fragment cause the High Bandwidth. Refer to the troubleshooting below to fix the fragment issue. FortiGate (Sender/Receiver) : Configure the default MTU size at Policy FortiGate: config firewall policy     edit XXXXX tcp-mss-sender : XXXXX tcp-mss-receiver : XXXX end FortiAnalyzer : Turn off segmentation-offload: diagnose system interface segmentation-offload port <action> // off||on