FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
amuda
Staff
Staff
Article Id 306534
Description This article describes one of the possible reasons why video or web pages are slow or fail to load.
Scope FortiGate.
Solution
  • Slow/failed to load a video/YouTube page:

 

amuda_0-1711946894644.jpeg

 

  • Debug flow shows that traffic for this source IP address has exceeded the shaper limit and is being dropped:

 

diagnose debug flow filter saddr 10.80.4.191

diagnose debug console timestamp enable

diagnose debug flow show iprope enable

diagnose debug flow show function-name enable

diagnose debug flow trace start 100

diagnose debug enable

 

amuda_1-1711946894652.jpeg

 

  • Further, check on the Traffic Shaper configuration, there’s one policy enabled (Shaper-A):

 

amuda_2-1711946894658.jpeg

 

  • The shared shaper used shows that the max bandwidth allowed is 20 kbps as shown (20kbps has been used for demonstration purposes of this knowledge article):

 

amuda_3-1711946894664.jpeg

 

 There are two options to rectify the issue:

  • Option 1: Increase the maximum bandwidth allowed.
  • Option 2: Disable traffic shaper.

 

with option 1:

  • Changed the 'Bandwidth unit' to Mbps and increase the 'Maximum bandwidth' allowed (this depends on bandwidth capacity available) as shown:

 

amuda_4-1711946894667.jpeg

 

  • The video can load properly:

 

amuda_5-1711946894671.jpeg

 

  • No more dropped bytes observed:

 

amuda_6-1711946894677.jpeg