Hello
Background
I work at a school with 2000 Student strength, And every student has a android tablet of his/her own to access the study material. Teacher's too have devices either Laptop or Tablet. We are facing lot of connectivity issues like drop inpackets, wifi connected but no internet connection. Frequent disconnection from wifi. if there are large number of users then there is no Network shown in the device. Screen cast frequent disconnection. Slow IP assignment from the Firewall.
Conserning is Frequent disconnection of the TV from the tablets on Screen cast. Major issue.
The network topology is as follows.
150 Mbps Leased Line Connectivity to the Fortigate100E firewall ----> L2 Cisco SG300-52P 52-Port Gigabit PoE Managed Switch and from there it distributes to Unifi AP PRO , Unifi LR-U6 , Lan connections to PC / Printers and also to other switches that give connectivity to IP camera and PC's
The frequent disconnections are giving me headache. How do i resolve this. The tablet are samsung A8 2018 and TV are LG Smart tv with webOS
Concerns :
From My research online 100E can support only upto 200 Users is it True?
Which Firewall will help me to improvise the network.
Will Adding Ubiquity Dream machine pro along with the fortigate Firewall help in improving the network.
Any alternates for the Fortigate Firewall
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
If this is a casting issue, that would be an issue with WiFi coverage. Not the firewall... What does your RF environment look like? Have you done a wireless survey? Is your wireless network properly designed for your client coverage and capacity?
Where are you getting the information on 200 users? Is that the SSL VPN number? FortiGate firewalls are sized on total throughput, not users. I would work with your preferred Fortinet partner or your account SE on a sizing discussion.
No, you should not add a Dream Machine and a FortiGate. The Dream Machine would replace the FortiGate and is not needed. FortiGate is a FAR better firewall than the Dream Machine.
Alternatives for FortiGate? Why? Palo Alto, Cisco, CheckPoint are some very common competitors.
Hi @szcad
You need a new sizing in order to find which FortiGate model is best for you (and probably for WiFi as well). As suggested by @adambomb1219 you should ask your Fortinet account manager or you Fortinet partner for such sizing.
"Will Adding Ubiquity Dream machine pro along with the fortigate Firewall help in improving the network."
Most of the time it is better to buy the same firewall twice if you are going to buy two anyways.
If you buy two FortiGates you can put them in either Active-Active or Active-Passive HA.
Whew, you got a lot going on and will restate some of what others have mentioned, but also give some opinions from my perspective (and making some assumptions from lack of further details), also coming from a school district. I would recommend a consultant to come in and riddle out your network infrastructure issues with WiFi.
Devices getting disconnected from WiFi have nothing to do with the size of your firewall based on your topology statement (as it's just an edge firewall). As others mentioned, the firewall sizing is more from a throughput requirement than a user requirement. That being said, your 150Mb Internet circuit is woefully undersized and I bet you are maxing that out daily (you have staff as well to take into consideration as well). Based on my typical needs of throughput (especially during times of state testing), my guess is 1Gb would be more appropriate for your size district.
Hopefully, you can address this via e-rate funding which would pay for a majority of that cost. With your circuit maxed (again, making an assumption), you will get a lot of dirty traffic, packet retries, etc... So for example, you mentioned screen cast disconnects, this could be the result of your wifi issues, but this could also be the result of your Internet circuit saturation as some platforms use a cloud server for their screen share to connect to (eg... Promethean), so if that cloud server cannot be reached during periods of congestion, then you would have screen sharing issues.
The 100E model you have is rated at 250Mb Threat Protection, so it can handle your current Internet circuit bandwidth; but if you are able to upgrade your circuit, combined with evolving off the older E series of firewall, I'd probably look at the 100F (1Gb Threat Protection) or 120G (2.8Gb Threat Protection) series...again my opinion.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1705 | |
1093 | |
752 | |
446 | |
230 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.