• Packets discarded by the shaper impact flow-control mechanisms like TCP. For more accurate testing results prefer UDP protocol.

• Traffic shaping accuracy is optimum for security policies without a protection profile where no FortiGate content inspection is processed.

• Do not oversubscribe an outbandwith throughput. For example, sum[guaranteed BW] < outbandwith. For accuracy in bandwidth calculation, it is required to set the “outbandwidth” parameter on the interfaces. For more information see “Bandwidth guarantee, limit, and priority interactions”.

• The FortiGate unit is not prioritizing traffic based on the DSCP marking configured in the security policy. However, TOS based prioritizing can be made at ingress. For more information see “Differentiated Services”.