FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
This article describes how to optimize memory by using session timers.
Scope
FortiGate.
Solution
Session timer optimizations:
tcp-halfclose-timer: A state where the server sends fin.
tcp-halfopen-timer: A state where the client sends syn and it is waiting for syn/ack from the server.
tcp-timewait-timer: The TIME-WAIT state is where the application waits for opened socket to close.
config system global set tcp-halfclose-timer 30 [ default 120 s ] set tcp-halfopen-timer 5 [ default 10 s ] set tcp-timewait-timer 0 [ default 1 s ] end
config system session-ttl set default 300 [ default 3600 s ]
By reducing the session timers and device can quickly remove the cache and it will free up the memory.
