Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
FlashOver
New Contributor

Disable Firewall Services in general?

Hi. Is it possible to disable the firewall functionality in general so the FGT is acting like a router without firewall session handling? Have here a FGT60C and with FOS5.2 it feals really slow. Because we use it woutout any firewall rules (any-any) in this case, maybe we can help the device to have more free power. is that possible? haven' t found a command on cli yet.
5 REPLIES 5
emnoc
Esteemed Contributor III

Yes you can, but the real reason is why? You should trouble-shoot the slowness. The FGT60C is a power router for what it' s designed for. config system settings set asymroute enable end

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
FlashOver
New Contributor

Only the GUI feels slow. Have also disabled the logging on GUI (think that will switch it of, because I haven' t found a CLI command to disable disk logging for that device).... Will try it tomorrow on a 100MBit/s uplink and will see how it performs. Will replace a Cisco 891 Router.
Dave_Hall
Honored Contributor

I agree with emnoc; I would attempt to troubleshoot the slowness issue -- starting with checking for any duplex/speed mismatch on your " WAN" interface. You can do this from the CLI by typing diag hardware deviceinfo nic <interface name> and check for any errors.

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
emnoc
Esteemed Contributor III

fwiw slowness of the WebGUI is a common trait in 5.2 GA on smaller devices. You need to post this in the 5.2GA forum. If they get enough complaints they might look more closer at these issues imho.

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
Istvan_Takacs_FTNT

Run a few commands first before you disable everything. Maybe a few UTM engines are causing the performance issue, not necessarily the web gui or the firewall. # get system performance status # diagnose sys top-summary if any of them running on high CPU/memory, than check the log; # exe log filter category 1 <--- for Events. Without number for the full list. # exe log display At least you would know what is causing the performance issue, instead of just assuming that it' s the web UI.
Labels
Top Kudoed Authors