Fortigate - Traffic Shaping Fundamentals (QoS)
In this video I get you up to speed on Traffic Shaping on Fortigates. If this is a new topic to you, this video is made for you! If this is something you know well, then hang around until the end for a few CLI DIAG commands you can use to quickly gather info to speed up your troubleshooting.
DIAG Commands used in the video:
1) diag firewall iprope list 100015
2) diag firewall shaper per-ip list
Key Take Always:
1) QOS = Traffic Shaping
2) "Guaranteed" Bandwidth is the minimum bandwidth that will be guaranteed to be made available to a device.
3) "Maximum Bandwidth is the maximum bandwidth that will be made available to a device.
4) Share Shapers - The bandwidth Guarantee or Maximums (or both) are shared by every device that uses that policy. Only controls UPLOAD speeds. You need a reverse shaper to control download speeds.
5) Per-IP Shapers - The bandwidth Guarantee or Maximum (or both) is distributed on a PER DEVICE basis. No Sharing of bandwidth minimums or maximums. Per-IP shapers control BOTH upload and download speeds.
6) Traffic Shaping profiles are like advanced features; most organizations don't need to get this far into QoS.
Hey there, my name is Chris and I like to help people learn tech! Specifically, cyber security. If you found this video while looking for Fortinet NSE4 (Fortigate) study materials, congrats! I decided to make these videos after passing the NSE4 and wanting to help others do the same.
Check out my socials!
/ infosecforhuman
/ chris-ray-i4h
https://infosecforhumans.com/