License and performance limitation

[AEK]

Hello

We have a FortiGate 1801F, OS 7.0.12.

Haven't activated the license yet because it is not in production yet. No UTM configured so far.

We noticed that when we have a peak of sessions, around 40K/s and total of 2M sessions, the firewall just silently stops forwarding any traffic and no new session is created anymore, so all my network is down, with no error message anywhere on the event logs.

Knowing that 1801F is capable of 750K sessions per second and can handle a total of 12M sessions.

So my question: Is it possible that this lack of performance is due to the fact that my firewall does not yet have a license?

[Toshi_Esumi]

Sounds like it went into a conserve mode. What do you see in memory usage? You should see some events in System Event log. Although some self troubleshooting is possible like in the KB, I would open a ticket at TAC to get looked into.

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-How-to-do-initial-troubleshooting-of...

Toshi

[AEK]

It is definitely not conserve mode.

Actually my concern is just if unlicensed 1801F can have some performance limitation of any kind.

[Toshi_Esumi]

I wouldn't think so. The HyperScale license is required when the concurrent sessions go beyond the 12M mark as you pointed out. That's why I'm recommending opening a ticket.

Toshi

[srajeswaran]

I think the other discussion on conserve mode address this issue as well.
https://community.fortinet.com/t5/Support-Forum/Conserve-mode/m-p/277905#M221868

[AEK]

Yes its my thread as well :)