XGS126 gpupdate took a very long time via VPN

Hi Steve,

Thank you for reaching out to Sophos Community.

Kindly check the following KB which might assist you regarding the slow speed.

 Sophos Firewall: Troubleshoot VPN speed 

Hello Erik, thank you for the answer. Yes we tried all points from your link.

Hello there,

Can you enter the following commands directly from the Advanced Shell (5>3)of the Sophos Firewall

iptables -t mangle -I POSTROUTING -s 172.20.10.0/24 -d 10.10.0.0/16 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1300;

iptables -t mangle -I POSTROUTING -s 10.10.0.0/16 -d 172.20.10.0/24 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1300;

Just substitute the networks according to your subnets, if the issue persists after this, please open a case reference this Thread and let us know the Case ID.

Regards,

I tried for IPSec. Not very sucessfull but faster (value above for IPSec is wrong. It tooks about 30 minutes.

1st try: 5 minutes
2nd try: 12 minuten
3rd try: 16 minutes (with abort of computerpolicies)

I opened a case (07224519)

Hi Steve,

Thank you for sharing the case ID.Will put a note on your case ID.

Hi Steve,

Thank you for sharing the case ID.Will put a note on your case ID.