Show Forward Error Correction (FEC) in FAZ reporting

[eyerule]

Hi All,

We are using FEC on some FortiGates. I would like to see that is actually is working. For example how many redundant packets are being sent.
Does any one know how to build a FortiAnalyzer query for this?

[Jean-Philippe_P]

Hello eyerule, 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Thanks,

[Jean-Philippe_P]

Hello eyerule,

We are still looking an answer for your question.

We will come back to you ASAP.

Thanks,

[gfleming]

Hi eyerule, FEC is something that is always working in the background. It's not necessarily something that IMO would generate interesting reports.

FEC essentially is configured to send parity, or redundant, data packets across the link—typically an IPSec tunnel.

These packets are sent at a prescribed interval and quantity and enabled on a per-firewall policy basis.

So if you want to ensure it's working I would say the best way to tell is to run a packet capture and ensure you're seeing the redundant packets flowing across the link.

Another indirect way of monitoring FEC's functionality would be to monitor for packet loss on your WAN link and show that your packet loss on the IPSec overlay is reduced or nil.

[rymonds44]

FortiAnalyzer should be able to track FEC-related metrics, but finding the right query can be tricky. You might need to filter logs under forward traffic and look for fields related to packet redundancy or error correction. Have you tried using a custom dataset in FortiView to visualize FEC performance? Also, if anyone has a working query, it would be great to see an example. By the way, while troubleshooting this, I took a break and came across Getting Over It with Bennett Foddy—definitely one of the most frustrating yet rewarding games out there!