Poor SSL VPN performance when using TCP

Question

Hello folks, 
 
 i am pretty disappointed with the SSL VPN performance on TCP connections. When using TCP i only get ~16 Mbit/s when copying files over SMB. With UDP the performance is much better and i get the full 50 MBit/s. This is not acceptable at all, since i always got the full performance with UTM on even slower hardware and i need to use TCP on some sites. I've tested this on multiple appliances with our customers (XG210, XG125, XG115 etc.) and it's always the same: TCP performance on SSL VPN is plain bad and there is no heavy load on the CPUs involved. 
 
 Is this a bug, or is the TCP SSL VPN performance really that bad compared to UTM?

FloSupport · Accepted Answer

Hi All, 
 Please note that SFOS v18 MR2 is a limited release that includes early access of an IPS engine version upgrade and other related changes. 
 Sophos will soon publish a broader release that includes additional fixes. 
 Regards,

FloSupport · Answer

To follow up with what LuCar Toni mentioned, 
 For users that are experiencing issues with poor SSL VPN performance, please raise a support case and reference the following ID's:

If on XG v17.5 - NC-59080

If on XG v18.0 - NC-61102

Please share your support case number on this community thread as well. 
 Thanks,

Prism · Answer

I've just upgraded my XG to v18 MR-2, apparently this issue has been fixed. Just tested with both UDP and TCP and I'm getting same speeds on both protocols. (400Mbit/s). 
 
 Thanks!

LuCar Toni · Answer

Overall should this be resolved in MR3. 
 See: https://community.sophos.com/xg-firewall/b/blog/posts/xg-firewall-v18-mr3

guillaume bottollier · Answer

Hi all, 
 Following the support ticket opened, Sophos cofnirmed me that this issue is presumed to be corrected on 18.0.2 and 17.5.14 ... which have no ETA for now.

Poor SSL VPN performance when using TCP

Top Replies