Slowww VPN SSL

[Alternative]

Hi !

I am experiencing speed issues with SSL VPNs. I can't exceed 20MB/s on gigabit lines during SMB transfers. I've run some not-so-great iperf3 tests about 25MB/s (200Mbits/s).

I have tested from several sites towards to several sites. Still the same. It doesn't matter the model of Fortinet (200, 60F, 80F).

I(ve tried with enabling DTLS on Fortinet and in Forticlient (https://community.fortinet.com/t5/FortiGate/Technical-Tip-Using-DTLS-to-improve-SSL-VPN-performance/...). It remains the same.

Any idea ?

[MZBZ]

Long story short: Switch to IPSEC IKEv2 and if it does not improve open a TAC case!
If you want to dig deeper, perform a-z packet capture on the endpoint, server and all important nodes in between and perform TCP analysis (MSS, retransmission, window size and ...)