Wan Optimization Transparent Mode; Fortigate Models That Support Wan Optimization - Fortinet Gate 60D Administration Manual

Overview of FortiGate WAN optimization

WAN optimization Transparent mode

FortiGate models that support WAN optimization

604
Firewall traffic shaping is compatible with client/server (active-passive) transparent mode
WAN optimization rules. Traffic shaping is ignored for peer to peer WAN optimization and
for client/server WAN optimization not operating in transparent mode.
WAN optimization is transparent to users. With WAN optimization in place clients connect
to servers in the same way as they would without WAN optimization. However, servers
receiving packets after WAN optimization see different source addresses depending on
whether transparent mode is enabled for WAN optimization or not. If transparent mode is
enabled, WAN optimization keeps the original source address of the packets, so servers
appear to receive traffic directly from clients. Routing on the server network should be able
to route traffic with client source IP addresses from the FortiGate unit to the server and
back to the FortiGate unit.
Note: Some protocols, for example CIFS, may not function as expected if transparent
mode is not selected. In most cases you should select transparent mode and make sure
routing on the server network is configured as required to support transparent mode.
If transparent mode is not enabled, the source address of the packets received by servers
is changed to the address of the FortiGate unit interface that sends the packets to the
servers. So servers appear to receive packets from the FortiGate unit. Routing on the
server network is simpler in this case because client addresses are not involved, but the
server sees all traffic as coming from the FortiGate unit and not from individual clients.
Note: Do not confuse WAN optimization transparent mode with FortiGate unit transparent
mode. WAN optimization transparent mode is configured in individual WAN optimization
rules. FortiGate transparent mode is a system setting that controls how the FortiGate unit
(or a VDOM) processes traffic.
WAN optimization is available on newer FortiGate models that also support SSL
acceleration, high-capacity internal hard disks, the FortiGate-ASM-S08 module, or the
FortiGate-ASM-SAS module. This includes the following models:
• FortiGate-51B and 111C
• FortiGate-310B
• FortiGate-620B
• FortiGate-3000A
• FortiGate-3016B
• FortiGate-3600A
• FortiGate-3810A
• FortiGate-5001A-SW
FortiGate models 51B and 111C use an internal hard disk for web caching and byte
caching. FortiGate models 310B, 620B, 3000A, 3016B, 3600A, 3810A, and 5001A-SW
use the hard disk in the FortiGate-ASM-S08 module or the SAS system connected to the
FortiGate-ASM-SAS module for web caching and byte caching. All FortiGate models that
support WAN optimization except for the 51B and 111C models can also be configured to
use iSCSI for web caching and byte caching.
WAN optimization and web caching
FortiGate Version 4.0 Administration Guide
01-400-89802-20090424
http://docs.fortinet.com/ • Feedback