Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

RE: Serious Bandwidth Concerns

Let me say, first, that I have finally been forced over from UTM (why Sophos ever decided to EoL such a stellar product, is beyond me).

It takes a whole other mindset to manage XG here; but, I am slogging through it - have had issues pretty much across the board, and, I am not a fan of the "make a configuration change, and, it doesn't instantly take effect like it did on UTM".

That said, one of my biggest issues right now, is bandwidth across the firewall pair (HA-active\active). I can barely pull 1080p YouTube content, and, my LANcache is downloading in literal bytes/sec. I've increased the bandwidth assigned to all the base QoS profiles; and, have even gone in and "stickied" "High Guarantee" profiles to the related firewall rules, to no avail. I must be missing something here, that works differently than UTM. I've disabled IPS across the board, and, added URL and internal IP exceptions to Web Filtering. I've even tried taking one of the firewall nodes offline, and see no improvement in bandwidth across the firewall. I've got multiple Gb/s available on the WAN side, which I could [nearly] fully utilize under UTM, so, there's something with the XG configuration that is hindering me.

"Hardware" is identical virtualized nodes, running on separate hosts - assigned the maximum CPU and memory under "home" licensing.



This thread was automatically locked due to age.
Parents
  • So: Like in UTM, if you dont activate stuff like ATP or IPS or Decryption, it should be plain firewall throughput, which is always high value. 

    A-A does not make sense in most installations (UTM or SFOS) from a performance perspective. 4C6GB Ram should be enough for most home installation (if not all). 

    Did you check the live connections based on the throughput? 

    __________________________________________________________________________________________________________________

Reply
  • So: Like in UTM, if you dont activate stuff like ATP or IPS or Decryption, it should be plain firewall throughput, which is always high value. 

    A-A does not make sense in most installations (UTM or SFOS) from a performance perspective. 4C6GB Ram should be enough for most home installation (if not all). 

    Did you check the live connections based on the throughput? 

    __________________________________________________________________________________________________________________

Children
No Data