Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Firewall IPsec Site2Site settings page slowdown

Hi all,

when we try to add or change a configuration on the IPsec settings page on our XG/XGS Firewalls we always have to wait for about 2 minutes for the site to load and for it to be usable. The web browser shows the message "This page is slowing down Firefox. To speed up your browser, stop this page.". If you change a setting for example the local/remote subnet, you have to wait again for 2 minutes to continue/save.

This issue has been present for years now and through all the version from V18, V18.5, V19,  V19.5 to V20. This issue is also present on all the models we have in production. (XG330, XG450, XGS2100, XGS3300) My guess this has nothing to do with the firewall itself but more of the webpage trying to load something. Most likely something javascript related.

It doesn't matter which browser we use (Firefox, Edge, Chrome, etc.) or if we use the local firewall administrator or if we go through Sophos Central. We have tried different endpoints and we even tried from home with personal devices which don't have an endpoint protection installed.

Does anyone else have this issue? If so, is there a fix for it?

Greetings

Jens



Added TAGs
[edited by: Raphael Alganes at 5:45 AM (GMT -7) on 27 Aug 2024]
Parents
  • How many tunnels do you have on this particular firewall? 

    __________________________________________________________________________________________________________________

  • On that particular firewall from the screenshot we have 10 tunnels. But we also have a firewall with just 1 tunnel and the issue is the same on that device.

  • It is odd to me. Is this an old firewall and might the tunnel be "corrupt" in terms of migrated from an old configuration?

    Right now, my firewall with 5 tunnels take 1-2 sec to fully load. Tunnel configuration takes 1-2 seconds too. 

    If you check in F12 developer tools, do you see something stuck? 

    I will PM you for more details as well. 

    __________________________________________________________________________________________________________________

  • The one from the screenshot has been running for about 4 years now and basically went through all the versions. But there was never a migration from an old configuration. The tunnels are also working fine, no performance issue with them, it is just the administration were it takes a long time to load. The tunnel overview were all the tunnels are shown loads fine for me aswell, it is just when going into the settings of a tunnel.

    I will be setting up a completely fresh out of the box XGS3300 later to see if there is a difference. But on a fairly new, about half a year old XGS2100 we have the same problem

    I had a look into the developer tools an I see it getting stuck in a setTimeout handler on Node.insertBefore.

Reply
  • The one from the screenshot has been running for about 4 years now and basically went through all the versions. But there was never a migration from an old configuration. The tunnels are also working fine, no performance issue with them, it is just the administration were it takes a long time to load. The tunnel overview were all the tunnels are shown loads fine for me aswell, it is just when going into the settings of a tunnel.

    I will be setting up a completely fresh out of the box XGS3300 later to see if there is a difference. But on a fairly new, about half a year old XGS2100 we have the same problem

    I had a look into the developer tools an I see it getting stuck in a setTimeout handler on Node.insertBefore.

Children