Technical Tip: How to tune TCP maximum segment siz...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 269894

Description

This article describes how to tune TCP maximum segment size in an explicit proxy FortiGate.

Scope

FortiGate.

Solution

In the FortiGate common firewall policy, it is possible to tune the TCP maximum segment size as commands below:

config firewall policy

edit 1

set tcp-mss-sender <value>

set tcp-mss-receiver <value>

end

But there is no such option or command in the explicit proxy policy when the TCP maximum segment size issue is encountered.

So it is possible to tune TCP maximum size on the interface as commands below:

config system interface

edit <interface name>

set tcp-mss <value>

end

For considerations regarding changes to MSS behavior and values, refer to the notes in the article: Technical Tip: Setting TCP MSS Value.

3175

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: How to tune TCP maximum segment size in explicit proxy FortiGate

You are leaving our website