This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSEC Site-To-Site VPN Slow

Hi,

I have an strange issue, When I download a file from internet I get the maximum speed of my ADSL connection (13Mbit) But when I download from my remote site using a IPSEC tunnel i only get 2-4Mbit per stream.
If I download via multiple streams every stream get 2-4Mbit and I can get the maximum speed.

The CPU is never close to maxed. Only 1-2%.

I have Path MTU enabled and also ECN on both sites. I have tried without also but the same result.

Anyone got an idea on what could be the cause of this?

Best Regards
Frank


This thread was automatically locked due to age.
Parents Reply Children
  • Hi, and welcome to the UTM Community!

    Rather than disable UDP flood protection for everything, check the Intrusion Prevention log to see what Exception(s) you need to add.

    Cheers - Bob 

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • We have had the same problem in our company for about 4 weeks.

    Two locations Site to Site VPN:

     

    Location 1: SG135, 500/500 Mbit, FW: 9.605-1

    Location 2: SG125, 100/30 Mbit   FW: 9.605-1

     

    Since the last firmware update the SitetoSite VPN is extremely slow. I can only get a speed of exactly 780 KB/s.

    Before the update we were able to use the full bandwidth.

     

    Both tunnels have already been deleted, restarted the Firewall´s and tunnels newly set up. No improvement.

    IPS is not used at either site and MTU support is also active.

     

    Any ideas?

    Thanks

  • I responded on your thread in the German Forum.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA