How to optimize memory by using session t...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 269332

Description

This article describes how to optimize memory by using session timers.

Scope

FortiGate.

Solution

Session timer optimizations:

tcp-halfclose-timer: A state where the server sends fin.
tcp-halfopen-timer: A state where the client sends syn and it is waiting for syn/ack from the server.
tcp-timewait-timer: The TIME-WAIT state is where the application waits for opened socket to close.

config system global
set tcp-halfclose-timer 30 [ default 120 s ]
set tcp-halfopen-timer 5 [ default 10 s ]
set tcp-timewait-timer 0 [ default 1 s ]
end

config system session-ttl
set default 300 [ default 3600 s ]

By reducing the session timers and device can quickly remove the cache and it will free up the memory.

5247

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: How to optimize memory by using session timers

You are leaving our website