This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Slow internet browsing - HTTPS on Sophos UTM

Hi,

I have 2 appliance that I have setup Sophos UTM 9 Home Edition on, one is at UTM 220 and other is SG 310 on firmware: 9.600-5

UTM 220, I've setup all the Firewall rules and Web Filtering and it works great no issues.

On the SG 310, I've copied the exact same rules and almost any HTTPS traffic is either very slow or doesn't load at all. I've disabled everything and still slow, some sites either loads fast on HTTPS others missing pictures on the page and others don't load at all.

I've check all the logs on SG and don't see anything specific.

This thread was automatically locked due to age.

Parents

0 MasterRoshi over 5 years ago

If you disable web protection does the behavior persist?
Cancel
Vote Up 0 Vote Down

Cancel
0 Eric Michaud over 5 years ago in reply to MasterRoshi

Yes it does, even created an any any rule on the firewall and still the same issue.
Cancel
Vote Up 0 Vote Down

Cancel
0 MasterRoshi over 5 years ago in reply to Eric Michaud

What does the MTU show on your WAN port?
Cancel
Vote Up 0 Vote Down

Cancel
0 Eric Michaud over 5 years ago in reply to MasterRoshi

1500 on the WAN Port.
Cancel
Vote Up 0 Vote Down

Cancel
0 MasterRoshi over 5 years ago in reply to Eric Michaud

Unless the ISP expects the MTU to be lower and it is causing fragmentation or you have some QOS enabled, I don't see any reason for this happening.

If you plug in directly to the ISP, is the speeds as expected?

Can you try this in the cmd on a windows machine behind the 310?

ping -f -l 1472 8.8.8.8
Cancel
Vote Up 0 Vote Down

Cancel
0 Eric Michaud over 5 years ago in reply to MasterRoshi

Yep I get the speed expected even behind the 310 - speed test is all good.

I know the MTU is good since my UTM 220 works with MTU at 1500. I did ping test yesterday and no issues when I did that size of packets yesterday.

I'm just thinking if something didn't installed correctly when I loaded the Image on the device. I've even talked to my co-workers in the Network team and they said it doesn't make sense. I even tried the latest firmware and same issue.

I might just fully wipe the device and reinstall the OS on it just to test it again.
Cancel
Vote Up 0 Vote Down

Cancel
0 MasterRoshi over 5 years ago in reply to Eric Michaud

I would try different ports for both the LAN and WAN side as well just to make sure.

Confirm the ports are getting 1GB/Full as well.
Cancel
Vote Up 0 Vote Down

Cancel
0 Eric Michaud over 5 years ago in reply to MasterRoshi

Yeah that one thing I'll also try. Will let you know later tonight when I get home.
Cancel
Vote Up 0 Vote Down

Cancel
0 Eric Michaud over 5 years ago in reply to Eric Michaud

Ok,

So still wasn't a no go, so I fully wiped the appliance reinstalled and and seems to be working now.... Will monitor it for a few days, my kids will let me know right away if it doesn't work. So I'm still puzzled on what could have been the cause.
Cancel
Vote Up 0 Vote Down

Cancel
0 Eric Michaud over 5 years ago in reply to Eric Michaud

So the reinstall of the OS on the appliance fixed the issue, it's been ok for 6 days now and no issues reported.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Eric Michaud over 5 years ago in reply to Eric Michaud

So the reinstall of the OS on the appliance fixed the issue, it's been ok for 6 days now and no issues reported.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data