CLI Connections per second

[CorneJvV]

Hello All My client is running a 60C and I think it might be too small for the environment. How can I check how many connections per second or total connections are currently taking place on the device?

[Warren_Olson_FTNT]

CorneJvV, In the Dashboard section make sure you add the widget " Session History" to get an idea of how many sessions are currently/have been ocurring through the appliance.

[emnoc]

Alternative & from the cli get sys performance status diag sys session stat This will give some history and current status. You graph this in cacti also if your up to the challenge.

[CorneJvV]

Hello All Thank you both for the replies. Just to confirm, the session count is the concurrent sessions and not the sessions per second? session_count=2817 FOrtiGate60C# diag sys session stat misc info: session_count=2817 setup_rate=16 exp_count=0 clash=23804 memory_tension_drop=0 ephemeral=0/30208 removeable=0 ha_scan=121 delete=0, flush=0, dev_down=0/0 TCP sessions: 1004 in ESTABLISHED state 133 in SYN_SENT state 18 in SYN_RECV state 22 in FIN_WAIT state 373 in TIME_WAIT state 35 in CLOSE state 26 in CLOSE_WAIT state firewall error stat: error1=00000000 error2=00000000 error3=00000000 error4=00000000 tt=00000000 cont=27488f07 ids_recv=cbaee6d6 url_recv=00000000 av_recv=7790f387 fqdn_count=00000001 tcp reset stat: syncqf=234376 acceptqf=0 no-listener=4210102 data=0 ses=116 ips=0 global: ses_limit=0 ses6_limit=0 rt_limit=0 rt6_limit=0 FOrtiGate60C#

[Jupiter_FTNT]

setup_rate=16

This is connection per sec

session_count=2817

This is the concurrent sessions

[emnoc]

I would be very careful using those commands to benchmark if you FGT is to small. The get sys performance would at least give you an avg The # of session ( accumulative ) is one thing , the number of new connection ( per/sec ) is another , and the thru-put is entirely something else. Those cmds will not bevery helpful if you don' t have a baseline collection. You really should be graphing these over a course of time and then you will have useful information for making a wiser decision imho.

[bladex79]

What would be the MIB's to use for Connections Per second (CPS) & concurrent connections? I FgSysSesCount captures concurrent connections but I cannot find one for CPS for Fortigate. :(

[dasilva13]

What size environment are you running? IE, amount of users/UTM features enabled (IPS,AV,Web,DLP,FCT Etc) that would maybe help us decide whether or not you have the right size device. I my experience, the 60c is only for very small branch offices that don' t need a lot of features enabled.

[Matthew_Mollenhauer]

We have a 60CX-ADSL-A in our London office, it' s more than big enough for the 7 users using ADSL when not using UTM. However running UTM features with 7 users will put the CPU at 100% when using about 10Mbps of the ADSL. Regards, Matthew

[sotir1984]

Can i view session per second for a single policy?