Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • +3 person also asked this people also asked this
  • Locked Locked
  • Replies 33 replies
  • Answers 1 answer
  • Subscribers 54 subscribers
  • Views 17893 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Connect - slow and freezing connections for SMB and RDP

lukg

I'm using Sophos XG 4500 v19 and we have noticed that connections to SMB servers when using Sophos connect remote access with default IPSEC profile are slow and unresponsive.

DoS protection is off  and we are not using traffic shaping.

Any Ideas ?



This thread was automatically locked due to age.
Parents
  • 0

    We are running XGS3300 SFOS 18.5.2 MR-2-Build380
    We are having SMB speed issues between on-prem firewall and Sophos virtual firewall running in Azure. Case #05611513

    Sophos support offered no troubleshooting when I asked them if this could be MTU size related since we are having issues with anything larger than 1378 bytes over the tunnel. They replied with the following:

    Access the Sophos Firewall console via SSH.
    Select 5. Device Management > 3.  Advanced Shell.
    Run the command: cish
    Run the command “ system ipsec-acceleration disable”

    I'm going to try this but it would be nice to know if we should do some troubleshooting first.

Reply
  • 0

    We are running XGS3300 SFOS 18.5.2 MR-2-Build380
    We are having SMB speed issues between on-prem firewall and Sophos virtual firewall running in Azure. Case #05611513

    Sophos support offered no troubleshooting when I asked them if this could be MTU size related since we are having issues with anything larger than 1378 bytes over the tunnel. They replied with the following:

    Access the Sophos Firewall console via SSH.
    Select 5. Device Management > 3.  Advanced Shell.
    Run the command: cish
    Run the command “ system ipsec-acceleration disable”

    I'm going to try this but it would be nice to know if we should do some troubleshooting first.

Children
No Data
Unfiltered HTML