FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
AnushaSampath
Article Id 215911
Description This article describes how to fix high latency and packet loss issues over Telstra satellite WAN connection in SD-WAN setup.
Scope FortiGate.
Solution

High latency and packet loss over Satellite WAN connection under the performance SLA of SD-WAN will lead to link-down issues.

 

Since the satellite link latency is very large, it is necessary to modify the interval(default 500ms), probe-timeout(default 500ms), and SLA of health-check as follows:

 

config health-check
    edit "SLA_Profile_ID"
        set server <server1_IP_address>
        set interval 1600
        set probe-timeout 1600
        set members 0
            config sla
                edit 1
                    set latency-threshold 1000
                    set jitter-threshold 800
                    set packetloss-threshold 5
                next
            end
    next
end

 

Note: This is also applicable for Starlink as an SD-WAN member.