Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
dusterio
New Contributor

FortiGate 60D - NAT performance?

Hello guys!

 

What is in your experience/opinion the maximum throughput (bandwidth performance) of a 60D?

 

I configured one with two virtual networks, simple NAT routing, almost no rules or features, but I can't get speed higher than 150 Mbps? Nevertheless, the CPU load only comes to 50% so CPU doesn't look like the bottleneck in this case.

 

Do you have a 60D should be capable of routing a 500 Mbps uplink, with NAT and a few simple firewall rules?

3 REPLIES 3
MikePruett
Valued Contributor

You are trying to route between two VLANs and are only getting 150 Mbps?

 

It should handle that.

 

Now if you are routing out to the internet over a fast enough pipe Mine would peg at like 130-150 Mbps....it had some UTM on it though

Mike Pruett Fortinet GURU | Fortinet Training Videos
Toshi_Esumi

We don't specifically test NAT but it shouldn't affect much to its performance. Our iperf test without NAT is below:

No VPN: up to 500Mbps before starts showing significant packet drops

with IPSec: up to 300Mbps before ...(ditto)

Toshi_Esumi

Forgot to mention...above test is conducted with simultaneous upload and download UDP streams. A regular speed test is one direction at a time.

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors