Sophos Central Endpoint and SEC: Computers fail/hang on boot after the Microsoft Windows April 9, 2019 update. Please follow knowledge base article 133945
Learn about the Benefits of Multi-Factor Authentication (MFA). Turn your MFA on now!
We'd love to hear about it! Click here to go to the product suggestion community
Hi I have 4 sites. 3 of which are running SG330, my other is on XG230. My Site to Site traffic via IPSEC between the SG330 devices is just fine. However from any of the SG devices to the XG my transfer speed is barely 2Mbps. All 4 locations have either 100Mbps or 150Mbps Fiber at them. Anybody have some insight on what might be going on?
Which IPsec Policy do you use?
Do you use any QoS on the Firewall Policies?
In reply to LuCar Toni:
I created a new policy and did it as shown. I put in a traffic shaping policy on the firewall rules to try and guarantee with highest priority.
In reply to Jesse Stockwell:
Is there a reason for using such a policy for XG to SG?
And you could play a little bit with the IPsec Policy.
You should not use SHA2 with 96 bit truncation.
Not at all, was just something I had that worked.
I followed the KB article you provided and I was able to peak at around 6Mbps but consistently still around 2-3Mbps. Better, still not great though.
You should play a little bit with the IPsec Policies on both sites. They should highly improve your Throughput.