At what threshold does FortiGate begin to drop new sessions?

FortiGate devices operate with a maximum session threshold, which is a critical aspect of managing session capacity and performance. When the session capacity reaches 95%, the system enters a state where it is considered at risk of being overloaded. At this point, to prevent the device from failing to handle new connections effectively, FortiGate begins to drop new sessions.

Dropping new sessions helps to maintain performance and stability for existing connections by ensuring that the device does not exceed its maximum capabilities. This proactive approach is essential for maintaining the integrity of network traffic and preventing potential disruptions.

Understanding this threshold is vital for network administrators, as it allows for better planning and resource allocation to avoid reaching the maximum session limit. They may need to adjust configurations, increase resources, or manage traffic loads to ensure optimal performance of their FortiGate device.