FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
metz_FTNT
Staff
Staff
Article Id 345101
Description This article describes the client-comforting feature of the FortiGate.
Scope FortiOS supported versions.
Solution

Client-comforting is designed to avoid issues with connection timeouts and file download failing while waiting for Firewall content inspection proxy features buffering the data while inspecting it. 

 

It is easier to describe it by explaining the configuration options that control it:

 

comfort_interval (seconds) --> The number of seconds the proxy waits before client-comforting begins.

 

For example, if set to 10, the proxy will start sending comfort bytes to the user only after it has been buffered for 10 seconds. Comfort bytes are sent every 10 seconds.

 

comfort_amount (bytes) --> The number of bytes that the proxy will send to the user as comfort. For example, if set to 100, the proxy will send 100 bytes to the user at each comfort interval.

 

This creates a constant data flow to the user, keeping the data transfer active.

 

To configure it, create a new profile-protocol-options profile and apply it to the policy:

 

config firewall profile-protocol-options
    edit <custom_profile> --> Just a name.
        config http
            set options clientcomfort
            set comfort-interval 10
            set comfort-amount 100
end

 

Note: The numbers used are just an example tune based on the specific requirement.