Fortinet Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
maraica
New Contributor

Slow internet speed & file sharing while connected to VPN

Hi Everyone, 

 

We have a SSL VPN for our corporate users on a Fortigate 5001V (daily average users 10-15).  Everyone internet speed slows down as soon as they connect to vpn.  Below are some examples of speed test without and with vpn.  Please let me know if this is normal expected behavior slow down or if there is something that we can do to improve the situation.  I can also provide tracert if need be.  We do have a manage network so I do not full cli access to the blade, but I can pass any recommendation to our manage provider company:

 

The issue is more significant and a pain point when users map a server shared folder and they try to save or dowload the file.  The VPN blade is in the west coast and most share folders are also in the west coast.  I do expect some slowness while updating huge excel files in the NY shares drive folders.  Our typical time from vpn or from mpls is always consistent at 75ms from LA to NY (while on vpn or mpls is always at around 73ms), so I think the culprit could be the fortinet 5001v.  

 

 

100/100  -> on vpn 20/10

300/20  -> on vpn 30/3

70/10 -> on vpn 15/2

175/5 -> on vpn 15/5

 

thank you

 

Manuel

2 Solutions
hubertzw

By this hardware specification FG-5001E devices has 9Gbps throughput for SSL VPN.

https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/Fortinet_Product_Matrix.pdf

You shouldn't have any problems with the platform. What is the software version?

View solution in original post

hubertzw
Contributor III

https://help.fortinet.com/fos50hlp/54/Content/FortiOS/fortigate-hardware-acceleration-52/acceleration-overview.htm

View solution in original post

13 REPLIES 13
KPS
New Contributor III

hubertzw wrote:

....Remember you can't offload proxy inspections to FortiASICs, all is done on CPU.

Hi!

 

Are you sure about that? I think, Fortigate CP8/CP9 will offload in flow-mode AND proxy-mode...

hubertzw
Contributor III

https://help.fortinet.com/fos50hlp/54/Content/FortiOS/fortigate-hardware-acceleration-52/acceleration-overview.htm
KPS
New Contributor III

hubertzw wrote:
https://help.fortinet.com...eleration-overview.htm
Wow... In that case, nobody should use proxy-mode on any model >FG100x - right?

 

In that case, I did some stupid things...

 

KPS

 

hubertzw
Contributor III

Till 5.4 official Fortinet recommendation was proxy, starting from 5.6 it's flow. I know it is not easy decision: security vs performance.