Please refer the below topology,
Client >>> Cisco router >>> Firewall >>> Upstream device >>> server
I have set mtu as 200 in my upstream device and as exepected when client access the server(http) the packets are fragmented.
However when I set tcp-mss(in my case to 55)on my Firewall, I can see it is successfully shared(updated mss) on 3 way handshake, However I can still see client or server is sending MSS more than 55 which is causing fragmentation.
Is it expected?Kindly help
Welcome to your new Fortinet Community!
You'll find your previous forum posts under "Forums"
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.