Thread Info
  • Locked Locked
  • Replies 10 replies
  • Subscribers 9 subscribers
  • Views 39536 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Slow Upload Speed UTM9 SG230

AnotherStranger

Hi There,
We are currently experiencing an extreme slow upload rate with our SG230 UTM Version 9.351-3. (Base + Network Protection Subscription).

Download is fine with round about 86mbit/s but the upload is at 2-3 mbit/s at its best with our 100/100 connection.

I tried to turn IPS and the Advanced Threat Protection but with no success
Any suggestions where to look at?

Cheers,
Dave



This thread was automatically locked due to age.
  • QoS settings enabled (Interfaces & Routing -> QoS)?

    ----------
    Sophos user, admin and reseller.
    Private Setup:

    • XG: HPE DL20 Gen9 (Core i3-7300, 8GB RAM, 120GB SSD) | XG 18.0 (Home License) with: Web Protection, Site-to-Site-VPN (IPSec, RED-Tunnel), Remote Access (SSL, HTML5)
    • UTM: 2 vCPUs, 2GB RAM, 50GB vHDD, 2 vNICs on vServer (KVM) | UTM 9.7 (Home License) with: Email Protection, Webserver Protection, RED-Tunnel (server)
  • in reply to scorpionking
    No, QoS is deactivated on all interfaces.
    And no Advanced QoS Options are active.
  • There are several other possibilities:
    - Bad cables
    - ISP or modem problem
    - UTM high load (check logs, especially IPS log, and run top on cmd while uploading)

    ----------
    Sophos user, admin and reseller.
    Private Setup:

    • XG: HPE DL20 Gen9 (Core i3-7300, 8GB RAM, 120GB SSD) | XG 18.0 (Home License) with: Web Protection, Site-to-Site-VPN (IPSec, RED-Tunnel), Remote Access (SSL, HTML5)
    • UTM: 2 vCPUs, 2GB RAM, 50GB vHDD, 2 vNICs on vServer (KVM) | UTM 9.7 (Home License) with: Email Protection, Webserver Protection, RED-Tunnel (server)
  • in reply to scorpionking
    Thanks for your reply.

    The load is at 0.22 at max while uploading. IPS is still deactivated.

    I changed all the cables from our UTM and talked to our ISP (but there is apparently no problem on their side) and ending up with the same result.

    This is whole thing is too strange, maybe i missed something?
  • You seem to have covered the main checks with checking system load, QoS, IPS and ATP etc.

    1. How are you testing your upload speed?
    2. What are your upload speeds like when you're not actually going through the UTM? Just to 100% rule out your ISP.
    3. What do some basic tests like a ping and traceroute to the external network show? Are any hops particularly slow at a certain point on your network?

    It's a long shot can you see any important traffic being dropped in the live firewall log?

    It's pretty strange that you're experiencing throughput issues with upload when you only have the Network Protection module enabled. If it's not your ISP it'll likely be a configuration issue somewhere.
  • Check your speed and duplex settings for both all utm to switch and utm to cpe connections. If you see errors, etc try hard-setting speed and duplex on your utm ports and the other equipment to make them match.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • Were you ever able to resolve this? Im having the same issue. Running 9354-4. I get the same results even if i plug directly into the lan port on the firewall with my laptop.

    Thanks,

    John
  • in reply to johnHicks
    Hi, John, and welcome to the UTM Community!

    Do you see indications in the logs mentioned in #1 in community.sophos.com/.../22065

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • in reply to johnHicks

    Hi John,

    I know it's a bit late but yes.
    We had an ARP resolution Issue with the Sophos SG210 UTM and our ISP.

    What I've done was quite simple:
    - Changing ARP resolution on our Fibre <&gt; Ethernet Router from our ISP
    - Setting the WAN Interface to 1GB ( second curious thing was that our SG set it after several reboots to 10M/100M while our Router was allowing 1GBs)

    - Checking our routing to our ISP / beyond that.

    So this was more like a ISP related issue ...

  • in reply to AnotherStranger

    Out of interest is this only with Windows 7 machines?

Unfiltered HTML