More management connections than expected for one device

The FortiGate-6000 may show more management-related network activity than most FortiGate devices. This occurs because many management functions are handled independently by the management board and each FPC.

For example, when a FortiGate-6000 first starts up, the management board and all of the FPCs perform their DNS lookups. Resulting in more DNS-related traffic during startup than expected for a single device. Once the system is processing data traffic, the amount of management traffic would be proportional to the amount of traffic the system is processing.