Web Filter slow down my internet connection

[bouyaka]

Hello there I'm using a fortinet 60D with the latest firmware (6.0.11) I'm in Proxy-based Mode. I have noticed that when web filter is enabled, I loose almost 60% of my bandwidth. As soon as I disable the WF, the full speed bandwidth gets back. I tried to do same test with app control but it doesnt affect the bandwidth. Is it a known issue ? Is there any tweaks or settings I need to double check ? Do I need to pass to Flow Based Mode ? Flow based mode seems to have less options to filter url than proxy based. Thanks

[Yurisk]

I don't have any 60D around to test. But in general if you don't use specific to proxy mode features, there is no benefit in working with it, by specific features I mean User/Category Quotas, enforcing Safe Search, playing tricks with Youtube channel filtering. If you don't do any of it - try switching to Flow Mode at least for a check.

[bouyaka]

Thanks for your reply. Yes I will give it a try, the fact of switching to flow based, wont reset all my settings, filters, policy, app control rules etc right ? 

[Yurisk]

Nope, it will not, will write warning message where relevant that "Proxy only features are configured but will not work as working in FLow mode" something in this style.

[bouyaka]

Ok I'll give it a try asap then Thank you

[JD168]

Hello, same here, FG100F with v6.2.9 build1234. To really use the filters we have to choose proxy based. I hope this will be fixed in future fw releases. Proxy based bandwith = 95mbit/s - 98mbit/s

Flow based bandwith = 270mbit/s - 290mbit/s

Proxy based (filter available):

- AV - Web - DNS

- App

- IPS - Email - WebAPp - SSL

Flow based (filter available):

- AV - Web - DNS

- App

- IPS - SSL

[JD168]

Hello,

now with version "v6.4.8 build1914" the speedtest results are the same with flow-based and proxy-based settings.