1

I have fortigate 300C, since today morning I am getting error NAT port is exhausted and also I observed high bandwidth consumption due to which links were getting flapped. I have search on google but not found any satisfactory answer.

Can anyone help me to understand why this is happened, and what should I do to troubleshoot.

3

This message means that all high ports (>1023) are used up for outbound NATted connections. This is very rare and signifies that your FGT is processing way too many sessions. Check the number of open sessions in the GUI or CLI (get sys perf stat), "average sessions" and "average sessions setup rate".

Two main reasons may apply: either you've hit a firmware bug or some host(s) on your internal network start sessions wildly, possibly malware induced. High (outbound) bandwidth consumptions hints into the malware direction, too.

Remedy: reboot your FGT. Watch the session count and buildup rate. Depending on the firmware version used, check FortiView to determine where the majority of sessions either originate or are destined to. Then follow the trails.

You may find more hints and help on the Fortinet forum (forum.fortinet.com).

| improve this answer | |
  • Thax, This issue has been resolved. One of our PC is start sessions wildly due to which High (outbound) bandwidth consumption hints. I disconnected that system from network and now everything seems to be normal. – Nishad Morey Jan 25 '17 at 14:13
  • @NishadMorey, if the situation is resolved and this answer is useful, then you should accept it, or you should post your own answer and accept it, otherwise the question will keep popping up forever, looking for an answer. – Ron Maupin Jan 25 '17 at 15:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.