Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 4 subscribers
  • Views 4496 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Endpoint Protection via Enterprise Console - SLOW INTERNET!

AGASD_IT

Hello,

About a month or two ago I setup our Enterprise Console and joined our domain machines... ever since users have been complaining of internet slowness. After doing several tests - Sophos seems to be the culprit. Quick fix is to un-install Sophos AV all together and the machine works beautifully. Obviously, I do not want to do that, especially on 400+ machines. One thing to note is by rolling out the EC, the client version was updated to 10.x.

Please HELP! I now have a couple hundred users very upset with me!

The internet is acting very slow in general, often causing page timeouts. It doesn't seem to matter which browser they use. 



This thread was automatically locked due to age.
  • 0

    Hello AGASD_IT,

    internet slowness
    means latency and/or slow page loads when using a browser? If so, all browsers or only specific, and which Windows version?

    It could be an LSP interaction.

    Christian 

  • 0

    Hi,

    What OS are they?  Split Win 7 and Win 10?

    If you disable Web control, if enabled in the Web control policy. 

    Then disable in the Anti-Virus policy:

    Block access to malicious websites - OFF

    Content scanning to OFF rather than "as on-access".

    These are detailed in https://docs.sophos.com/esg/enterprise-console/5-5/help/en-us/pdf/sec_55_psgeng.pdf - pg 10 point 7.

    With all 3 of these features disabled the EP will not proxy web traffic from the browser.

    If you're running Windows 7 or less, then you need to restart the computer to ensure the LSP is unloaded from Winsock.  For Windows 10, no restart required.

    If this helps, I would try re-enabling just Content scanning first, this doesn't use lookups to the cloud.  Then enable the other 2, to see if you can isolate the feature/component.

    Regards,

    Jak

Unfiltered HTML