Sophos SSL VPN - Severe performance issue after upgrade to XGS-2100 SFOS 19.5.3

Any other recommendation is appreciated.

SSL-VPN Current Setting:

Tunnel access: Use as default Gateway (Currently turned off but turned it on for testing, same issue)

TCP | AES-128-GCM | SHA-256 | 2048  | Compress SSL VPN (Disabled) | Enabled Debug Mode (Disabled)

MTU - 1500

The above configuration gives us better performance than the previous one that was working with XG-210, however, there is still a bottleneck.

We have a very simple setup and only 20 SSL VPN users and there are no Site-to-Site VPN.

Since we upgraded to XGS-2100, the performance in our network has degraded.

Another problem is that I got a recurring flu for 2 months because I was forced to work on nights by Sophos Support as they needed to gather logs for 3 months now.

I am now reviewing other alternative products but I will be on a long holiday and will not be back until next year so I am trying to give the XGS 2100 another shot.

If anyone can suggest any other setting that I can test, it is very much appreciated.

Any other recommendation is appreciated.

SSL-VPN Current Setting:

Tunnel access: Use as default Gateway (Currently turned off but turned it on for testing, same issue)

TCP | AES-128-GCM | SHA-256 | 2048  | Compress SSL VPN (Disabled) | Enabled Debug Mode (Disabled)

MTU - 1500

The above configuration gives us better performance than the previous one that was working with XG-210, however, there is still a bottleneck.

We have a very simple setup and only 20 SSL VPN users and there are no Site-to-Site VPN.

Since we upgraded to XGS-2100, the performance in our network has degraded.

Another problem is that I got a recurring flu for 2 months because I was forced to work on nights by Sophos Support as they needed to gather logs for 3 months now.

I am now reviewing other alternative products but I will be on a long holiday and will not be back until next year so I am trying to give the XGS 2100 another shot.

If anyone can suggest any other setting that I can test, it is very much appreciated.

Hello there,

To reiterate, Sophos Support should work during your preferred working hours, not the other way around.

Checking last month's activities, I can see your case is now more aligned with your working hours, but unfortunately, the last session with DEV didn't go as expected.

I have escalated this case internally with Management so GES/DEV/Management can work with you with a specific time plan to work on your issue if you would like

As per your case, the only thing I didn't see about the troubleshooting is what Luca recommended about disabling IPsec and Firewall acceleration. Can you confirm if you tried that so I can add the note in the case? 

Regards,