This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Active Firewall Rules Graph

Hi everyone,

First, let me start by saying that I am extremely new to the Sophos world, so this may be a silly question.

I am trying to troubleshoot an issue we are having. End users are experiencing a pretty slow web browsing experience. Much slower than usual, we have a 500/50 internet connection coming into the facility. I have checked with the ISP and they cannot find any issues on their end. SO, I have landed at our sophos device for troubleshooting.

I'm thinking back before this issue started, I used to see a lot more blue on that graph than there is currently. But to be honest I don't actually know exactly what that graph is telling me. Can someone explain the graph? Another thing I noticed, is that my Bandwidth will drop extremely low at times. Can anyone point me in the right direction? This is a Sophos XG310 running 17.5.10 MR-10 running in HA mode.

Thanks!

This thread was automatically locked due to age.

0 LuCar Toni over 4 years ago

Wondering, you are only having 4 Firewall rules in total on a XG310?

360 Sessions in total looks like, you do not have many users behind this XG?

I would start to verify the current bandwidth available on the XG kernel.

Log into the Shell and try a Download directly to the kernel.

wget -O /dev/null http://speedtest.dal01.softlayer.com/downloads/test100.zip

From those performance numbers, i would suggest to work on the next steps.

If the performance is good, something within the Linux configuration or behind XG is causing your performance issue.

If the performance is bad, something in front of XG(ISP) is causing the issue.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Zachary Ballard over 4 years ago in reply to LuCar Toni

Hello!

Thank you for your response. We have about 100 users.

I will try your suggestion above and get back to you.

Thanks again!
Cancel
Vote Up 0 Vote Down

Cancel
0 Zachary Ballard over 4 years ago in reply to LuCar Toni

Hello. I am getting a Network is unreachable when trying to do the test.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago

Hi,

the colour i the graph show the traffic being passed by the type of rule based on the colours of your active firewall rules just above the graph. I would not worry about the values shown in the graph they are more an indication that your have active users. Please check the diagnostics tab to see more realistic network traffic values. Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v20.0.2 MR-2

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 4 years ago in reply to Zachary Ballard

Try some other links like: http://ipv4.download.thinkbroadband.com/1GB.zip

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Zachary Ballard over 4 years ago in reply to LuCar Toni

Here are the results.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 4 years ago in reply to Zachary Ballard

12 mb/s looks fine to me.

If you download the same file with your browser - How fast is the download?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Zachary Ballard over 4 years ago in reply to LuCar Toni

Looks to be about the same.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 4 years ago in reply to Zachary Ballard

500 Mbit/s - I would expect something ~62.5 mb/s.

Not 12 mb/s. As you received the same performance on Linux, the assumption, there is something broken on your ISP.

Suggestion: Check your Interface of XG to your ISP: ethtool and ifconfig would be interesting.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 4 years ago

Zachary,

the graph mentioned is useless. You can understand if the usage of users rules is higher than Network rule and vice-versa.

Use the Connection list inside Diagnostics or use iftop from advanced shell.

The speed seems to be very low. Check the Traffic shaping settings under system settings.

Regards
Cancel
Vote Up 0 Vote Down

Cancel