Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

All Web pages loads very slowly with a fast internet connection

Dear Sophos Team,

 

Our company moved to the latest Sophos XG 105 (firmware SFOS 17.1.0 GA) with 15 users and we are overall very happy with it.

We currently only have the base firewall licence and shortly the network & web protection (license not received yet).

 

We have it coupled with a modem ZYXEL that acts as a PPPoE with a Fiber Optical line at 100mb/s up and down.

 

When we test the connection speed with speedtest.net, everything goes fast at 99 mb/s which is perfect.

However, when we are surfing, the speed to access a page is extremely slow like if the Sophos was doing many checks before grading the different elements.

Before the change to Sophos with exactly the same line, we didn't have such a slow down which makes us beleive that it is coming from the Sophos.

We have added a Firewall rule Lan-to-Internet which is very basic without any scanning or protection. Only Maskerading is ticked -> Without this, no internet access.

Can someone kindly help us to reslove this issue please ? I have attached different screenshot below.

 

THANKS in advance

Sam

 



This thread was automatically locked due to age.
Parents Reply Children
  • What is the speedtest behind firewall ?

    I would remove direct connection between modem and firewall and use a switch to connect them. It is worth a try.

  • Here is the result of the speed test. All is perfect.

    I don't have a spare switch to put between the modem and the Sophos Firewall. I am actually suprised that you are suggesting this.

    For information, this morning I tested with our previous Router and everything is perfect with it. All webpages are loading very well !

    Please check the video where you see the page loading very quickly without the sophos (same modem, same wifi): https://youtu.be/0ZSH_KyZUIk

    I am tempted to request a refund as this is not wroking properly !

    Any other idea would be appreciate ?

    Sam

  • If you can download a file at full download speed behind firewall,i would check the DNS. If you are not finding any issues with DNS settings, we are running out of options.

  • Bonjour,

     

    Je me permets de vous répondre en Français car je vois que le speedtest est en français! 

    Effectivement comme le soulignent les autres personnes il pourrait s'agit d'un problème de DNS, ou alors d'un problème de configuration sur le Firewall.

    Sur quels serveurs DNS pointe le client sur lequel le test de connexion est effectué ?

    Viken

    XG Certified Architect

    Sophos Gold Partner - Reseller from Lyon, France

  • Hi SAM ,

     

    Best thing to check is by using a test website which has a low foot print, eg test website 103.23.140.55

     

    on the Console of the XG firewall check the packet flow using command console> tcpdump'host 103.23.140.55

     

    You could also try on bbc.com and share us the results . You may obscure the public address for privacy concern.

     

    Also Check if the setting would help MTU 1492 and MSS 1412 or 1380

    Regards,

    Aditya Patel
    Global Escalation Support Engineer | Sophos Technical Support

    Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

  • Hi Aditya, VikenNajarian,

    IT WORKS !!!!!!!!!!!!!

     

    The error was that the DNS was on "Static DNS" with 192.168.1.1 only.

    I changed to "Obtain DNS from PPPoE" and rebooted the machine.

     

    Now all is fast and furious ! I also put back the MSS back to automatic which is 1452.

    Thanks for all your support !

    Sam