Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

All Web pages loads very slowly with a fast internet connection

Dear Sophos Team,

 

Our company moved to the latest Sophos XG 105 (firmware SFOS 17.1.0 GA) with 15 users and we are overall very happy with it.

We currently only have the base firewall licence and shortly the network & web protection (license not received yet).

 

We have it coupled with a modem ZYXEL that acts as a PPPoE with a Fiber Optical line at 100mb/s up and down.

 

When we test the connection speed with speedtest.net, everything goes fast at 99 mb/s which is perfect.

However, when we are surfing, the speed to access a page is extremely slow like if the Sophos was doing many checks before grading the different elements.

Before the change to Sophos with exactly the same line, we didn't have such a slow down which makes us beleive that it is coming from the Sophos.

We have added a Firewall rule Lan-to-Internet which is very basic without any scanning or protection. Only Maskerading is ticked -> Without this, no internet access.

Can someone kindly help us to reslove this issue please ? I have attached different screenshot below.

 

THANKS in advance

Sam

 



This thread was automatically locked due to age.
Parents
  • Hi Samuel Venker,

    You could start by checking the interface negotiation 100FD or 100HD ,you may also check if there is any negotiation issue between WAN or LAN with the next in-line device.

    Open Console go to Option 4 and typ ethe command

    console > system dia uti band       "press 'u' twice"

    Check if there is any error's E/S  (error/second)

    If so then lower the link speed.

    Also another step provide us the output of the command;

    Console> sh net interfaces

    You may obfuscate your Public Address for privacy and try to change the MSS value to 1452 and MTU to 1492.

    Regards,

    Aditya Patel
    Global Escalation Support Engineer | Sophos Technical Support

    Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

  • Hi Aditya,

    Thanks for your feedback. Very appreciated!

    I did what you just said but I am confused by the MTU changes.

    First, I checked the errors doing the "system dia uti band" and I don't get any errors:

     

    Then I do the cmd: sh net interfaces or ifconfig in advanced shell, this what I get:

    However, when I try to lower the MTU, it says that I need to have 48bytes difference which I believe I have...

    Am I changing it in the right place ? It is suprising that I cannot change the MTU. I tried to clicked "Overwrite MTU"

    Appreciate your help on this.

    Regards

    Sam

     

     

     

  • Hi Samual ,

    You can set the MTU the same and check if the connection speed would improve using MSS value is 1412.

    Regards,

    Aditya Patel
    Global Escalation Support Engineer | Sophos Technical Support

    Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

  • Hi Aditya,

    Still the same issue with the setting below...

    To give an example, I just loaded https://www.bbc.co.uk/  (from Firefox with private browsing) and it takes 30 seconds. It seems that every back and forth with the site are taking ages...

    If I use my 4G network on my mobile and share the connection via Wifi, it takes roughly 7 seconds.

    Any idea ?

Reply Children