Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
bouyaka
New Contributor

Web Filter slow down my internet connection

Hello there I'm using a fortinet 60D with the latest firmware (6.0.11) I'm in Proxy-based Mode. I have noticed that when web filter is enabled, I loose almost 60% of my bandwidth. As soon as I disable the WF, the full speed bandwidth gets back. I tried to do same test with app control but it doesnt affect the bandwidth. Is it a known issue ? Is there any tweaks or settings I need to double check ? Do I need to pass to Flow Based Mode ? Flow based mode seems to have less options to filter url than proxy based. Thanks

6 REPLIES 6
Yurisk
Valued Contributor

I don't have any 60D around to test. But in general if you don't use specific to proxy mode features, there is no benefit in working with it, by specific features I mean User/Category Quotas, enforcing Safe Search, playing tricks with Youtube channel filtering. If you don't do any of it - try switching to Flow Mode at least for a check.

 

Yuri https://yurisk.info/  blog: All things Fortinet, no ads.
Yuri https://yurisk.info/ blog: All things Fortinet, no ads.
bouyaka
New Contributor

Thanks for your reply. Yes I will give it a try, the fact of switching to flow based, wont reset all my settings, filters, policy, app control rules etc right ? 

Yurisk
Valued Contributor

Nope, it will not, will write warning message where relevant that "Proxy only features are configured but will not work as working in FLow mode" something in this style.

 

Yuri https://yurisk.info/  blog: All things Fortinet, no ads.
Yuri https://yurisk.info/ blog: All things Fortinet, no ads.
bouyaka
New Contributor

Ok I'll give it a try asap then Thank you

JD168
New Contributor III

Hello, same here, FG100F with v6.2.9 build1234. To really use the filters we have to choose proxy based. I hope this will be fixed in future fw releases. Proxy based bandwith = 95mbit/s - 98mbit/s

Flow based bandwith = 270mbit/s - 290mbit/s

 

Proxy based (filter available):

- AV - Web - DNS

- App

- IPS - Email - WebAPp - SSL

 

Flow based (filter available):

- AV - Web - DNS

- App

- IPS - SSL

Kind regards

Jens

Kind regards Jens
JD168
New Contributor III

Hello,

 

now with version "v6.4.8 build1914" the speedtest results are the same with flow-based and proxy-based settings.

Kind regards

Jens

Kind regards Jens
Labels
Top Kudoed Authors