Created on 09-27-2024 05:13 AM Edited on 09-27-2024 05:14 AM By Jean-Philippe_P
Description | This article describes the client-comforting feature of the FortiGate. |
Scope | FortiOS supported versions. |
Solution |
Client-comforting is designed to avoid issues with connection timeouts and file download failing while waiting for Firewall content inspection proxy features buffering the data while inspecting it.
It is easier to describe it by explaining the configuration options that control it:
comfort_interval (seconds) --> The number of seconds the proxy waits before client-comforting begins.
For example, if set to 10, the proxy will start sending comfort bytes to the user only after it has been buffered for 10 seconds. Comfort bytes are sent every 10 seconds.
comfort_amount (bytes) --> The number of bytes that the proxy will send to the user as comfort. For example, if set to 100, the proxy will send 100 bytes to the user at each comfort interval.
This creates a constant data flow to the user, keeping the data transfer active.
To configure it, create a new profile-protocol-options profile and apply it to the policy:
config firewall profile-protocol-options
Note: The numbers used are just an example tune based on the specific requirement. |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.