This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Active Firewall Rules Graph

Hi everyone,

First, let me start by saying that I am extremely new to the Sophos world, so this may be a silly question.

I am trying to troubleshoot an issue we are having. End users are experiencing a pretty slow web browsing experience. Much slower than usual, we have a 500/50 internet connection coming into the facility. I have checked with the ISP and they cannot find any issues on their end. SO, I have landed at our sophos device for troubleshooting.

I'm thinking back before this issue started, I used to see a lot more blue on that graph than there is currently. But to be honest I don't actually know exactly what that graph is telling me. Can someone explain the graph? Another thing I noticed, is that my Bandwidth will drop extremely low at times. Can anyone point me in the right direction? This is a Sophos XG310 running 17.5.10 MR-10 running in HA mode.

Thanks!

This thread was automatically locked due to age.

Parents

0 LuCar Toni over 4 years ago

Wondering, you are only having 4 Firewall rules in total on a XG310?

360 Sessions in total looks like, you do not have many users behind this XG?

I would start to verify the current bandwidth available on the XG kernel.

Log into the Shell and try a Download directly to the kernel.

wget -O /dev/null http://speedtest.dal01.softlayer.com/downloads/test100.zip

From those performance numbers, i would suggest to work on the next steps.

If the performance is good, something within the Linux configuration or behind XG is causing your performance issue.

If the performance is bad, something in front of XG(ISP) is causing the issue.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Zachary Ballard over 4 years ago in reply to LuCar Toni

Hello. I am getting a Network is unreachable when trying to do the test.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 4 years ago in reply to Zachary Ballard

Try some other links like: http://ipv4.download.thinkbroadband.com/1GB.zip

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Zachary Ballard over 4 years ago in reply to LuCar Toni

Here are the results.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 4 years ago in reply to Zachary Ballard

12 mb/s looks fine to me.

If you download the same file with your browser - How fast is the download?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Zachary Ballard over 4 years ago in reply to LuCar Toni

Looks to be about the same.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Zachary Ballard over 4 years ago in reply to LuCar Toni

Looks to be about the same.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 LuCar Toni over 4 years ago in reply to Zachary Ballard

500 Mbit/s - I would expect something ~62.5 mb/s.

Not 12 mb/s. As you received the same performance on Linux, the assumption, there is something broken on your ISP.

Suggestion: Check your Interface of XG to your ISP: ethtool and ifconfig would be interesting.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Zachary Ballard over 4 years ago in reply to LuCar Toni

Thats what I was thinking. Pretty slow for the amount of speeds we are paying for.

My wan port on the XG is port 2. What commands could I run to find some info? Sorry, im not very good with linux.

Thanks!
Cancel
Vote Up 0 Vote Down

Cancel