FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
This article describes how to fix high latency and packet loss issues over Telstra satellite WAN connection in SD-WAN setup.
Scope
FortiGate.
Solution
High latency and packet loss over Satellite WAN connection under the performance SLA of SD-WAN will lead to link-down issues.
Since the satellite link latency is very large, it is necessary to modify the interval(default 500ms), probe-timeout(default 500ms), and SLA of health-check as follows:
config health-check edit "SLA_Profile_ID" set server <server1_IP_address> set interval 1600 set probe-timeout 1600 set members 0 config sla edit 1 set latency-threshold 1000 set jitter-threshold 800 set packetloss-threshold 5 next end next end
Note: This is also applicable for Starlink as an SD-WAN member.
