Protocol Options best practices

[soma043]

Does anyone have any recommendations on settings in Protocol Options for a device that has AV, IPS, Web Filter (monitor only) and Application Control (monitor only) enabled? Users are complaining that web pages are very slow. Current Protocol Options are: *HTTP/S: Comfort Clients Enabled, Interval 3, Amount 10, Threshold 2, and Enabled Chunked Bypass (what is chunked bypass anyway?) Is the interval too long? The amount too little? What experiences have you had with these settings?

[Fullmoon]

using default settings of Protocol Options no issue for me so far

[soma043]

I' m guessing the Protocol Options are still sort of a mystery to most. Even when I call in and get a ' level 2' engineer at Fortinet, they are not familiar with the settings and ' have to research it' . My guess is, when tuned correctly, this could help fix the issues our users are complaining about. Since the Fortigate box has been put in (replaced a sonicwall), the users are very unhappy about the speed of web pages. Since most of their apps are hosted in the cloud, they are being very vocal about it.

[rwpatterson]

How is your DNS set up? Are you using the FGT for a DNS server or proxy? Check the DNS resolution speed. That has a lot to do with ' apparent' Internet speed issues. Grab this small utility and run it. You don' t have to build the custom list just for trouble shooting quickly, but I would recommend it (off hours) for fine tuning your DNS settings. http://www.grc.com/dns/benchmark.htm

[discoveryit]

These are my settings i have used for years that came from the Fortinet Sales Engineer.. They are pretty good and seem to never slow down. (Same for HTTP HTTP FTP) Comfort Client ON Interval 10 Amount 2500 Threshold.. (Depends on your Box) i usually do 5mb.. 1mb for anything smaller than a 60c. Setting the Threshold to high will make your users internet suck...