I'm having a significant performance issues with SSL VPN vs IPSEC VPN.
The specific issue is download performance. upload is blazing fast. What
have I done to troubleshoot?1. Verified client tunnel interface MTU
sizes2. Added TCP MSS size (1240 - Thi...
My FortiClient is continuously prompting me that its quarantined the
same file over and over again. Its occurring about 25 times a day and
freezing my laptop in the process. We use FortiCloud EMS. Does anyone
know how to exclude the Time Machine (Usi...
The RFC outlines how the DTLS avoids fragmentation for the handshake.
How does it handle avoiding fragmentation for the payload? Section
4.1.1. outlines the issue and a solution Path MTU discovery. I'm trying
to state is the ssl.root interface on the...
The true area of concern is the IPSEC VPN. Do you recommend setting both
TCP MSS to 1360 and MTU to 1400 at the virtual interface and the
appropriate policies? This way all the tunnel and all UDP or TCP traffic
within it are not fragmented? Leave the...
I'm trying to limit packet fragmentation (TCP and UDP) for traffic
originating from behind the FW and for the VPNs (SSL and IPSEC)
logically connecting to it. I'm not sure whether its best to apply the
TSP MSS size adjustment on the FW interfaces or ...
