Solved

did i neey to upgrade my fortigate unit

Posted on 2009-05-19
5
738 Views
Last Modified: 2013-11-16
hello
i have allso fortigate 60 unit connect to 100 users the memory is always above 72% ,the cpu is 35%
the browsing is very slow .
i add "last 60 minutes  "  traffic history print  screen.

did i need to upgrade the machine ??
and if the answer is yes , which modle you recommende??
fortigate.jpg
0
Comment
Question by:arielbos
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
5 Comments
 
LVL 23

Expert Comment

by:Mysidia
ID: 24427890
What type of internet connection do you have?   If that's just a T1, your users may be utilizing beyond the capacity of your link, hence the slowness.

Are you running the latest/best software for the Fortigate?


How many users are utilizing the device, and what is their normal expected internet activity; just browsing, and small e-mail messages, or are you running specialized apps  and/or  servers  accessible over the internet?
0
 

Author Comment

by:arielbos
ID: 24429194
hello
sorry but i dont know what is it "T1" our  technology  is could "ATM Direct "  dwonlaod= 2 M ,
Upload 0.5 M
evey user get band width of 1.5 M. (according to the internet sopplier and speedtest.net)
The Version of the fortugate unit is 3.0 this is the last update for this unit.
all the 100 users utilizing  the device most of them use in the computer for Email and browsing
often some group of student work in a learning websites  .
thier is a web software for the teacher in our school, this software take her data from the internet
The ability of the fortigate unit is utilized in its entirety (Anti Virut , IPS, Web Filtering,...)

i hope this is help you to understend the situaton
thanks for the help.
0
 
LVL 19

Accepted Solution

by:
Gabriel Orozco earned 50 total points
ID: 24484543
I see from the screenshot you are maxed out on your uploading bandwidth.

This is bad since TCP requires you to send an Aknowledge packet for each packet received and you are unable to send more packets, hence you are unable to reach your download capacity.

I do not believe you need to upgrade your box, but either optimize your internet usage or buy more bandwidth.

If you do not have funding for higher bandwidth, or (correctly) think you need to improve your internet usage, here are my recommendations:

a) Add a Squid Proxy. it can run on an inexpensive linux box, and will help to avoid downloading the same pages again and again. this way only new traffic will be using your link. Bonus is you will be able to see WHO is using the bandwidth and WHERE. fortinet supports the proxy protocol so you can do this.

b) traffic shaping. you need to privilege HTTP traffic over SMTP, since for emails to arrive three seconds later means no problem, while taking three more seconds on a simple web page makes your users angry.

here are some links I found on google for traffic shaping on fortinet:
http://docs.forticare.com/fgt/archives/3.0/techdocs/FortiGate_Traffic_Shaping_Tech_Note_01-30006-0304-20080407.pdf
http://kc.forticare.com/default.asp?id=1682&Lang=1

hope this help

http://kc.forticare.com/default.asp?id=1682&Lang=1
0

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This article is a how to to configure a UCS Ethernet-uplink portchannel via the console. It is easy to do and can be done quite quickly. In certain versions of the UCS manager the portchannel has issues coming up and this is a workaround. I am…
Hello All, I have been training on Multicast for a while now and whenever I start the topic , I find out that my friends /  Colleagues mention that they do not know how to test Multicast Joins. As most of the multicast would be video traffic and …
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question