Significant Throttling over SSLVPN FortiClient

[Nathan_Grossenbach]

When our employees are using Forticlient VPN, their speeds are throttled extremely low. The speed across the employees is consistent at 10-12mbps. Off the VPN, several employees have 100-500mbps.

We use a FortiGate firewall device. I don't have any traffic shaping rules setup. 

Is there anything else on the Fortigate that might be causing this issue? Traffic through the Fortigate - say at an office and not over VPN - has full throughput from the ISP.

[xshkurti]

@Nathan_Grossenbach 

Try to disable dtls as per below link and check speed again:

Troubleshooting Tip: ‘SSL-VPN slow file transfer ... - Fortinet Community

Regards,

[Nathan_Grossenbach]

Hello thank you for the comment. I just want to confirm, ENABLE or DISABLE dtls to help with the speed?

[Nathan_Grossenbach]

After running the disable command and rebooting the FortiGate, I am not seeing any changes. 

We've been told this is normal, but I can't imagine to this degree? 

[peisenberg]

disable

[Nathan_Grossenbach]

Thank you:

I ran 

config vpn ssl settings
    set dtls-tunnel disable
end

I unchecked DTLS in my client.

I am still throttled at 10-12mbps.

If I did something wrong, please let me know. 

Thank you all!

[hbac]

Hi @Nathan_Grossenbach,

What are the versions of FortiGate and FortiClient? Do you have split-tunneling enabled? 

Regards, 

[Nathan_Grossenbach]

FortiClient is on 7.2.2.0864

FortiOS is v7.0.12 build 0523 (mature)

There is no split tunneling enabled.