[Feedback] Performance 1Gbit Cable Ger.

Question

Hello to all, 
 I just did a little performance test and have to say this firmware rocks in terms of network speed. 
 
 How does my network look? 
 
 PC--->XG--->SW--->Router--->ISP--->Internet 
 
 The other part I am sadly double NATed... The main Router is a Firtzbox Cable Modem from the ISP (Ill change that in future with a modem from TC4400-EU with Docsis3.1/3.0 support) 
 In-between my Router and the XG is my DNS Server (Pi-Hole) and all works well. If the Pi-Hole misses something the XG will get it and vice versa. 
 But back to topic the performance compared to the current 17MR9 is huge! (3x more performance than usual) 
 
 The other part is Bufferbloat got very good. Protections active are: AV - WEB - APP - IPS - NAT with HTTP/s Decryption The Web Protections has the Default Rules (modified for my needs) 
 APP Rules are High Risk (Level 4 - 5) IPS Rules lantowan general 
 Scan HTTP and Decrypt HTTPS Traffic plus Scan FTP Traffic 
 Thats all for now. 
 Best regards 
 Eli.

Eli · Answer

Hello Mario Ostwald 
 to disable those services there is a little trick to it: 
 1. Enable Cloud Synchronization 
 2. Connect and Authenticate the Firewall to your Sophos Central Account 
 3. Disable "Security Hartbeat" and "Advanced Application Control" 
 4. Done 
 Example: 
 
 The other Services I disable over at "System Services" -> "Services" 
 
 Last but not least I disabled modules like the SIP Helper: 
 1. Logon to your Firewall with SSH 2. Choose 4 3. Run the command "system system_module show" to list all modules and afterwards "system system_module sip disable" 4. Run the command "system system_module show" to make sure it is "not loaded" 5. Done That is all what I did to unload all the stuff I do not need! But be careful some services are essential if you want to take full advantage of "Synchronized Security" - "Intercept X Advanced" since I do not have that I'll shut everything down to minimize load. 
 Never forget Test your Firewall protection features with: http://sophostest.com/ to see that ATP - WEBfilter - AV and so on work as intended. 
 Best regards 
 Eli.