Hot!How to know fortigate current throuput

Author
siomyn
Bronze Member
  • Total Posts : 22
  • Scores: 0
  • Reward points: 0
  • Joined: 2013/06/04 21:13:51
  • Status: offline
2017/07/17 01:39:30 (permalink)
0

How to know fortigate current throuput

Hi guys,
as subject, if in the datasheet says 1G firewall throughput, how we know the current throughput has been use by fortigate?
can we calculate from the CPU and memory usage? if yes how to calculate?
 
Thanks for your reply ..
Regards

OMYN
Technical Consultant | Indonesia
CCNP Security, Fortinet NSE 
#1

8 Replies Related Threads

    romanr
    Platinum Member
    • Total Posts : 923
    • Scores: 34
    • Reward points: 0
    • Joined: 2004/06/08 08:29:56
    • Location: Vienna/Austria
    • Status: offline
    Re: How to know fortigate current throuput 2017/07/17 02:48:10 (permalink)
    0
    Hey,
     
    "get system performance status" should give you a good starting point!
     
    FW_1 (global) # get system performance status
    CPU states: 6% user 9% system 0% nice 85% idle
    CPU0 states: 5% user 10% system 0% nice 85% idle
    CPU1 states: 5% user 11% system 0% nice 84% idle
    CPU2 states: 6% user 10% system 0% nice 84% idle
    CPU3 states: 10% user 6% system 0% nice 84% idle
    Memory states: 70% used
    Average network usage: 117261 kbps in 1 minute, 63268 kbps in 10 minutes, 101557 kbps in 30 minutes
    Average sessions: 17163 sessions in 1 minute, 16617 sessions in 10 minutes, 17018 sessions in 30 minutes
    Average session setup rate: 128 sessions per second in last 1 minute, 134 sessions per second in last 10 minutes, 140 sessions per second in last 30 minutes
    Virus caught: 0 total in 1 minute
    IPS attacks blocked: 0 total in 1 minute
    Uptime: 228 days,  16 hours,  17 minutes


    #2
    s3szy
    New Member
    • Total Posts : 8
    • Scores: 0
    • Reward points: 0
    • Joined: 2017/10/03 20:15:18
    • Status: offline
    Re: How to know fortigate current throuput 2017/10/04 04:55:46 (permalink)
    0
    you can use the command :   get system performance status 
    #3
    siomyn
    Bronze Member
    • Total Posts : 22
    • Scores: 0
    • Reward points: 0
    • Joined: 2013/06/04 21:13:51
    • Status: offline
    Re: How to know fortigate current throuput 2017/10/04 18:39:03 (permalink)
    0
    Hi all,
    Thanks for the reply, from that output, how can we calculate it?
    Is there any statement that declare how many Gigs usage?
    Currently for monitoring purpose, I just see the CPU and memory usage.

    OMYN
    Technical Consultant | Indonesia
    CCNP Security, Fortinet NSE 
    #4
    starberri
    New Member
    • Total Posts : 1
    • Scores: 0
    • Reward points: 0
    • Joined: 2020/06/11 01:20:16
    • Status: offline
    Re: How to know fortigate current throuput 2020/06/11 01:25:46 (permalink)
    0
    Hello,
     
    Someone have the answer ?
    i have the same question about the throuput.
     
    with the command 'get system performance status' you have the 'Average network usage'.
     
    Is it the rx and tx values display in Average network usage ?
     
    To get the throuput as the datasheet, we need to add up tx and rx ?
     
    Thanks in advance.
    #5
    SecurityPlus
    Gold Member
    • Total Posts : 386
    • Scores: 4
    • Reward points: 0
    • Joined: 2014/08/11 18:41:34
    • Status: online
    Re: How to know fortigate current throuput 2020/06/11 09:26:57 (permalink)
    0
    In addition to the previous solutions, you can refer to a chart showing interface bandwidth.
     
    To create based on FortiOS 6.09:
    Click Dashboard / Main / Add Widget (icon bottom right corner of page) / Monitor / Interface Bandwidth / Select interface from dropdown / Add Widget.
     
    This will add the Widget to the Dashboard / Main page usually at the bottom of the page.
     
    You can then change the time frame of the graph to 1 Hr. / 24 Hrs. / 1 Week
     
    You can add multiple charts one for each interface that you wish to monitor.

    FWF30E, FG40F, FG50E, FWF50E, FG60D, FWF60D, FG60E, FG60F, FG80E, FG100D
    FortiOS 5.2, 5.4, 5.6, 6.0, 6.2, and 6.4
    FortiSwitch FS-224E-POE, FS-124E-POE
    FAP-221E, FAP-224E, FAP-221C
    #6
    Patel
    New Member
    • Total Posts : 14
    • Scores: 2
    • Reward points: 0
    • Joined: 2020/05/10 04:04:40
    • Status: offline
    Re: How to know fortigate current throuput 2020/06/11 23:33:36 (permalink)
    0
    Hi,
     
    If you would like to get a proper throughput of the FortiGate or any device. The best test would be to run an IPerf test as you want to check if that matches to the datasheet or not. Also, as SecurityPlus mentioned you can add a widget in order to check it on the FortiGate.
     
    Also, you can filter the session out by the source and check the sent and received bytes in the sessions for particular source and destination:
     
    # diag sys session filter src <source IP Address>
    # diag sys session filter dst <dest IP Address>
    # diag sys session list
     
    This will show you information regarding that session and the amount of data passed through the FortiGate for that session.
     
    Hopefully this helps,
    Patel
    #7
    neonbit
    Expert Member
    • Total Posts : 559
    • Scores: 72
    • Reward points: 0
    • Joined: 2013/07/02 21:39:52
    • Location: Dark side of the moon
    • Status: offline
    Re: How to know fortigate current throuput 2020/06/14 06:53:35 (permalink)
    3 (1)
    FYI there's an inbuilt ifperf tester in the FGT
     
    https://kb.fortinet.com/kb/documentLink.do?externalID=FD45599
    #8
    Toshi Esumi
    Expert Member
    • Total Posts : 2339
    • Scores: 227
    • Reward points: 0
    • Joined: 2014/11/06 09:56:42
    • Status: online
    Re: How to know fortigate current throuput 2020/06/14 19:15:15 (permalink)
    0
    @neonbit, thank you for the info. I almost jumped out of my chair. I didn't know they implemented it with 5.6. Although this would work for the case in question, I was hoping this can be set between two FGTs; one server and one client like over an IPSec tunnel. Apparently it's only for inside of one FGT from ingress interface to egress interface. I don't know why they had to limit the feature, otherwise It could have been tremendously helpful and giving a competitive edge against competitors. I sat back down the chair.
    #9
    Jump to:
    © 2020 APG vNext Commercial Version 5.5