Traffic shaper in my FortiGate is not accurate and sometimes it doesn't work. I create several Per-IP traffic shapers profiles, then i apply in into policy. When i test internet speed in website speedtest.net. The speed is under what i limit. when i monitor it for one more day, all traffic shapers doesn't work and user can access the internet with full speed, while i haven't changed any configuration. Sometimes traffic shapers is under what is limit. sometimes all user can access the internet with full speed.
Here is my configuration.
config firewall shaper per-ip-shaper
set max-bandwidth 3072
config firewall policy
set srcintf "port11"
set dstintf "port9" "port10"
set srcaddr "220.127.116.11-18.104.22.168_3MB"
set dstaddr "all"
set action accept
set schedule "always"
set service "ALL"
set utm-status enable
set av-profile "default"
set webfilter-profile "Block_BadSite"
set spamfilter-profile "default"
set ips-sensor "default"
set application-list "Block_Torrent"
set profile-protocol-options "default"
set ssl-ssh-profile "certificate-inspection"
set per-ip-shaper "3-MB"
set nat enable
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.