FortiGate CNF Getting Started Resources
Mrrobot7
New Contributor

TCP MSS issue

Please refer the below topology,


Client >>> Cisco router >>> Firewall  >>> Upstream device >>> server

I have set mtu as 200 in my upstream device  and as exepected when client access the server(http) the packets are fragmented.
However when I set tcp-mss(in my case to 55)on my Firewall, I can see it is successfully shared(updated mss) on 3 way handshake, However I can still see client or server is sending MSS more than 55 which is causing fragmentation.

Is it expected?Kindly help

0 REPLIES 0
Announcements

Welcome to your new Fortinet Community!

You'll find your previous forum posts under "Forums"

Top Kudoed Authors