Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Christoph_Berthoud
New Contributor

Help identify significant increase in connections

Hi all, 

I'm seeing every few minutes the number of sessions moving through my FortiGate spike from a few thousand, to tens of thousands, and back.

Christoph_Berthoud_0-1648612535604.png

How would I best identify the source of these connections?

1 Solution
5 REPLIES 5
hrahuman_FTNT

Hi,

 

It seems to be you have very old FortiGate models. May I know the firmware images of the FortiGate ? We need to check that FortiView is supported in those images.

 

https://docs.fortinet.com/document/fortigate/6.0.0/handbook/560153/enabling-fortiview

https://docs.fortinet.com/document/fortigate/6.4.5/administration-guide/433781/fortiview-monitors-an...

 

-Habeeb

-Habeeb
Christoph_Berthoud

FortiOS 6.4.7 on a 500E model

 

Christoph_Berthoud_0-1648623253907.png

 

hrahuman_FTNT

Hi,

 

Then you can follow the FortiView to identify the session details.

 

https://docs.fortinet.com/document/fortigate/6.4.5/administration-guide/433781/fortiview-monitors-an...

 

 

-Habeeb
vponmuniraj
Staff
Staff
Christoph_Berthoud

Thanks, narrowed it down to a monitoring agent firing thousands of DNS (UDP/53) requests off every 5 minutes.