Sophos Firewall v22 EAP is now available! Click here to learn more.

Thread Info
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Active Firewall Rules Graph

Zachary Ballard

Hi everyone,

 

First, let me start by saying that I am extremely new to the Sophos world, so this may be a silly question.

 

I am trying to troubleshoot an issue we are having. End users are experiencing a pretty slow web browsing experience. Much slower than usual, we have a 500/50 internet connection coming into the facility. I have checked with the ISP and they cannot find any issues on their end. SO, I have landed at our sophos device for troubleshooting. 

I'm thinking back before this issue started, I used to see a lot more blue on that graph than there is currently. But to be honest I don't actually know exactly what that graph is telling me. Can someone explain the graph? Another thing I noticed, is that my Bandwidth will drop extremely low at times. Can anyone point me in the right direction? This is a Sophos XG310 running 17.5.10 MR-10 running in HA mode.

Thanks!



This thread was automatically locked due to age.
  • 0

    Wondering, you are only having 4 Firewall rules in total on a XG310? 

    360 Sessions in total looks like, you do not have many users behind this XG? 

     

    I would start to verify the current bandwidth available on the XG kernel.

    Log into the Shell and try a Download directly to the kernel.

    wget -O /dev/null http://speedtest.dal01.softlayer.com/downloads/test100.zip

     

    From those performance numbers, i would suggest to work on the next steps.

    If the performance is good, something within the Linux configuration or behind XG is causing your performance issue.

    If the performance is bad, something in front of XG(ISP) is causing the issue. 

    __________________________________________________________________________________________________________________

  • 0

    Hi,

    the colour i the graph show the traffic being passed by the type of rule based on the colours of your active firewall rules just above the graph. I would not worry about the values shown in the graph they are more an indication that your have active users. Please check the diagnostics tab to see more realistic network traffic values. Ian

    XGS118 - v22.0 EAP

    XG115 converted to software licence v21.5.0

    If a post solves your question please use the 'Verify Answer' button.

    • 0

      Zachary,

      the graph mentioned is useless. You can understand if the usage of users rules is higher than Network rule and vice-versa.

      Use the Connection list inside Diagnostics or use iftop from advanced shell.

      The speed seems to be very low. Check the Traffic shaping settings under system settings.

      Regards

      • 0 in reply to lferrara

        Hello!

         

        Here is the statistics from my WAN port 

         

        Also, here is my traffic shaping settings.

        • 0 in reply to Zachary Ballard

          Also,

           

          Here are the graph related to my Wan interface. Users are complaining of slow browsing and I am also noticing that browsing is slow and sometimes times out.

           

          My ISP, while not very trustworthy, says they see no issue. I don't believe them to be honest. I suppose the cable modem could be having issues??

          • 0 in reply to Zachary Ballard

            Zachary,

            first of the traffic shaping settings is expressed in Kbytes.

            Second:please share more details of: dns server used, http scanning and ips settings.