Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
JohnAgora
Contributor

Reduce objetcts

I have lots of objects. They are, for example, 

Object_1 - 10.0.0.10

Object_2 - 10.0.1.10

Object_3 - 10.0.2.10

Object_4 - 10.0.3.10

...

Object_n - 10.n.n.10

 

They I put all the objects on a Group, and then on a Firewall Policy.

 

Is there any way to do this better/easier?

I want to avoid having a slow Firewall (I have a 900D).

 

Thanks!

1 Solution
Dave_Hall
Honored Contributor

The Fortigate (and FortiOS version) has hard coded limits placed on them in terms of how many items or objects the config can "hold/process".  See the Maximum Values table document (link for 5.4); for the 900D it looks like that limit for firewall objects is 10000.  Keep in mind that Fortinet has designed these big boys to handle/process thousands of items/objects with little to no slow down (IMHO); I think the only real limits you may experience is the GUI/CLI rendering (web browser hardware/OS, etc.) of that many objects in the config.

 

 

 

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C

View solution in original post

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
2 REPLIES 2
Dave_Hall
Honored Contributor

The Fortigate (and FortiOS version) has hard coded limits placed on them in terms of how many items or objects the config can "hold/process".  See the Maximum Values table document (link for 5.4); for the 900D it looks like that limit for firewall objects is 10000.  Keep in mind that Fortinet has designed these big boys to handle/process thousands of items/objects with little to no slow down (IMHO); I think the only real limits you may experience is the GUI/CLI rendering (web browser hardware/OS, etc.) of that many objects in the config.

 

 

 

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
emnoc
Esteemed Contributor III

I agreed and will add the slowness in the webGUI is typically due to the browser, we've test IE FF CHROME Safari and notice rendering across the board was slower or faster depending o browser type.

 

 

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors