Fortinet black logo

online help

Adjusting table sizes

Copy Link
Copy Doc ID a26371c3-75fd-11ea-9384-00505692583a:747223

Adjusting table sizes

The conversion wizard Start options page allows you to specify whether FortiConverter allows larger table sizes and group membership than default in the output configuration.

This is useful when, for example, the source configuration has a large address group and the target configuration can accommodate the larger group. Otherwise, FortiConverter converts the large address group into two or more smaller address groups for a single policy.

For example, FortiConverter uses the following default maximum table sizes by default:

  • Address groups – 2500
  • Addresses per group – 300
  • Custom service objects – 1024

When this option is selected, FortiConverter uses the following maximum table sizes:

  • Address groups – 20000
  • Addresses per group – 1500
  • Custom service objects – 4096

Table size settings file

When you select Adjust table sizes, FortiConverter uses the maximum table sizes in the file TargetPlatformTablesizeSetting.txt, which is stored in the same folder as the FortiConverter executable file (for example, using the default installation path, C:\Program Files (x86)\Fortinet\FortiConverter\TargetPlatformTablesizeSetting.txt).

By default, the file contains the following values, which are suitable for high-end devices (for example, FortiGate 1200D or higher):

Address groups: 20000

Addresses per group: 1500

Custom service objects: 4096

You can manually adjust these values by editing the file.

Viewing maximum table sizes for your target device

On your target system, enter the following command:

print tablesize

The maximum table sizes are displayed in a response similar to the following output:

firewall addrgrp: 0 20000 20000

firewall addrgrp: member: 1500 0 0

firewall service custom: 0 4096 0

Adjusting table sizes

The conversion wizard Start options page allows you to specify whether FortiConverter allows larger table sizes and group membership than default in the output configuration.

This is useful when, for example, the source configuration has a large address group and the target configuration can accommodate the larger group. Otherwise, FortiConverter converts the large address group into two or more smaller address groups for a single policy.

For example, FortiConverter uses the following default maximum table sizes by default:

  • Address groups – 2500
  • Addresses per group – 300
  • Custom service objects – 1024

When this option is selected, FortiConverter uses the following maximum table sizes:

  • Address groups – 20000
  • Addresses per group – 1500
  • Custom service objects – 4096

Table size settings file

When you select Adjust table sizes, FortiConverter uses the maximum table sizes in the file TargetPlatformTablesizeSetting.txt, which is stored in the same folder as the FortiConverter executable file (for example, using the default installation path, C:\Program Files (x86)\Fortinet\FortiConverter\TargetPlatformTablesizeSetting.txt).

By default, the file contains the following values, which are suitable for high-end devices (for example, FortiGate 1200D or higher):

Address groups: 20000

Addresses per group: 1500

Custom service objects: 4096

You can manually adjust these values by editing the file.

Viewing maximum table sizes for your target device

On your target system, enter the following command:

print tablesize

The maximum table sizes are displayed in a response similar to the following output:

firewall addrgrp: 0 20000 20000

firewall addrgrp: member: 1500 0 0

firewall service custom: 0 4096 0