Thread Info
  • State Verified Answer
  • +2 person also asked this people also asked this
  • Locked Locked
  • Replies 23 replies
  • Answers 4 answers
  • Subscribers 27 subscribers
  • Views 57840 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Extremy slow internet speed

Nino Padrutt
over 4 years ago

Hi

I have a new Sophos XG115 without any firewall rule besides the default one, with a basic license, default webfilters and no IPS activated. It is connected to a router and to a internal switch. Both interfaces have 1000 Mbps - Full Duplex Auto-negotiated. When I make a speed test I'm at around 30 Mbps Up and Down. But when I try to open a website, it takes 15 seconds or more. Before we set up the firewall it was much faster. Also over the old WLAN, who is not behind the firewall it is much faster as well.

Any idea what could cause that?



This thread was automatically locked due to age.
  • 0 over 4 years ago
    Nino, Are you replacing a previous appliance with same ip? Check if av patterns inside XG are updated. Regards
  • 0 over 4 years ago in reply to lferrara

    Hi Iferrara

    Thanks for your reply!

    No they didn't have a firewall before. They are very small and basically just wanted something to provide a seperated access to the internet in case they want to sublet a part of their office.

    I updated the definitions from 8.x to 9.x. I will make some performance tests tomorrow.

  • 0 over 4 years ago in reply to Nino Padrutt

    Hi Nino,

    please try running two speed tests from different devices at the same time. This might be just require disabling some of the IPS functions.

    Also check you IPS -> DoS tab and see what results are displayed against which IPS function.

    Ian

     
    V18.5.x - e3-1225v5 6gb ram with 4 ports - 20w. 
    If a post solves your question use the 'This helped me' link.
  • 0 over 4 years ago in reply to rfcat_vk

    Hi rfcat_vk

    Thanks for your reply.

    In DOS everything is disabled. And the other features only come with higher subscriptions as far as I know.

    Best Regard
    Nino

  • 0 over 4 years ago in reply to Nino Padrutt

    Hi Nino,

    check dos attack and dos spoofing, they are seperate functions even though they might look the same.

     

    ian

     
    V18.5.x - e3-1225v5 6gb ram with 4 ports - 20w. 
    If a post solves your question use the 'This helped me' link.
  • 0 over 4 years ago in reply to rfcat_vk

    both of them are disabled

     

  • 0 over 4 years ago in reply to lferrara

    I checked everything for udpates. But unfortunately this didn't solve anything. I also tried to deactivate the AV and IPS Service but that didnt help too.

  • 0 over 4 years ago in reply to Nino Padrutt

    Hi Nino,

    on the second screen shot, you have only shown the top part of the page, there are more settings below that might be having an effect.

    Ian

     
    V18.5.x - e3-1225v5 6gb ram with 4 ports - 20w. 
    If a post solves your question use the 'This helped me' link.
  • 0 over 4 years ago in reply to rfcat_vk

    Hi,
    I booted to the firmwarew SFOS 16.05.3 MR-3 which came preinstalled and here the performance is fine. So it seems there is a bug or something in the new version.

  • 0 over 4 years ago

    Hi Nino , 

    It would seem that the issue with the negotiation which would lead to packet loss and would enable to retransmit the packets again. Since you are using 30mbps up/down stream I would recommend you to set to 100mbps Full duplex manually and check if that would improve the performance. 

    Another hint may be observed on the interface if there is an error or not. 

     

    Toggle 'u' two times to get this page and check if its 0 or not as per the screen shot.

    Regards,

    Aditya Patel
    Global Escalation Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

Unfiltered HTML