Access to web slow using protection policies

[#1]

We have a 620B running v4.0,build0194,100121 (MR1 Patch 3). We have several policy rules that related to HTTP/HTTPS but the perspection is that the rule that has a protection profile attached to it results in slower web access. The protection profile is only for logging web activity but as we' re in the process of gradually migrating all users through an Identity Based policy utilising a protection profile I am concerned I will be have lots of people complaining about slow web access. I have checked the troubleshooting and all checks indicate the problem isn' t related to accessing the Fortiguard service but has anyone else experienced a slow down in web access after applying protection profiles. Cheers

[#2]

This issue is now resolved. We' ve re-routed access to the Fortigard service via a different pipe and this has improved things considerably.

[#3]

Hi Tony, I have nearly the same problem with a configuration of two 200B in HA active-active setup. When I deactivate the in the web filter profile the FortiGuard Web Filtering then I have no problems, otherwise the performance goes done in a dramatic way. We are using 4MR2P3. The check in System - Maintenance - FortiGuard is successfull. What do you mean with " service via a different pipe and this has improved things considerably" . Perhaps it helps also at our configuration. Thanks for your help. Stefan. PS: With the same configuration at the setup of one FGT 200A we haven' t had any problem.