XGS126 gpupdate took a very long time via VPN

Hi Steve,

Thank you for reaching out to Sophos Community.

Kindly check the following KB which might assist you regarding the slow speed.

 Sophos Firewall: Troubleshoot VPN speed 

Hello Erik, thank you for the answer. Yes we tried all points from your link.

Hello there,

Can you enter the following commands directly from the Advanced Shell (5>3)of the Sophos Firewall

iptables -t mangle -I POSTROUTING -s 172.20.10.0/24 -d 10.10.0.0/16 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1300;

iptables -t mangle -I POSTROUTING -s 10.10.0.0/16 -d 172.20.10.0/24 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1300;

Just substitute the networks according to your subnets, if the issue persists after this, please open a case reference this Thread and let us know the Case ID.

Regards,

Hello there,

Can you enter the following commands directly from the Advanced Shell (5>3)of the Sophos Firewall

iptables -t mangle -I POSTROUTING -s 172.20.10.0/24 -d 10.10.0.0/16 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1300;

iptables -t mangle -I POSTROUTING -s 10.10.0.0/16 -d 172.20.10.0/24 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1300;

Just substitute the networks according to your subnets, if the issue persists after this, please open a case reference this Thread and let us know the Case ID.

Regards,

I tried for IPSec. Not very sucessfull but faster (value above for IPSec is wrong. It tooks about 30 minutes.

1st try: 5 minutes
2nd try: 12 minuten
3rd try: 16 minutes (with abort of computerpolicies)

I opened a case (07224519)

Hi Steve,

Thank you for sharing the case ID.Will put a note on your case ID.

Hello Steve,

No, it’sn’t wrong it’s only a suggestion; you can go lower up to 900.

I thought you were using IPsec but, reading again your question you did mention it was SSL, sorry for the confusion and  thank you for sharing the Case ID with us.

Regards,

Hi,

Upon checking the case, we found that this is now closed.

Would it be possible to share the case resolution?

No, there isn't a solution yet. Last information:

"As discussed on call I will check with my internal resources and update you within 2 business days."

Hello,

Just to clarify, the case isn’t closed and Support as you mentioned will be checking internally and provide you with an update withing 2 business days.

Regards,

Hi All,

My bad. My mistake, got confused with the case ID. The case isn’t closed as of the moment.