This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SG135 slow internet connection

Hi all,

We use two SG135 - FW 9.712-13 with completely identical config (really 100% identical) and identical fibre internet connection 300/50.

At the first SG135 iv'e get the full internet speed but at the second SG135 the downspeed is limited to approx 60mb down (upspeed is ok).

If i connect directly to the ISP modem i get the full downspeed of approx 300mb.

I found here in the community a similar problem with the information that IPS was the problem.

So far so good, but when i turn off the IPS setting i get approx 100mb down instead of approx. 60mb but the rest 180mb downspeed are still missing.

I also deactivated QOS, ATP, etc. including reboot of the device but doesn't change the situation

Did anyone here have any suggestions what i can try else?

This thread was automatically locked due to age.

Top Replies

Vivek Jagad over 2 years ago in reply to Sophos User6847 +1 verified

In that scenario can you check the interface negotiation [duplex -full/half] ?

Parents

0 Vivek Jagad over 2 years ago

Hello Sophos User6847,

Thank you for reaching out to the community, can you please refer a KBA - slow browsing - https://community.sophos.com/sophos-xg-firewall/f/discussions/104325/internet-speed-slow-after-few-hours

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Sophos User6847 over 2 years ago in reply to Vivek Jagad

Hello Vivek Jagad,

I followed the steps from your linked KBA but when i try the speedtest in cli, i very often get the following error:

Retrieving speedtest.net configuration...
Cannot retrieve speedtest configuration
ERROR: HTTP Error 403: Forbidden

I receive the 403 error at both SG135.

I write "very often" because after approx 30 attempts the speed test was possible for one time, after sucessfully speedtest i can play around again ver yoften until speed test is possible again.

However, after a few trys the cli speedtest was done sucessfully and the result was:

Testing download speed................................................................................
Download: 93.40 Mbit/s
Testing upload speed................................................................................................
Upload: 14.25 Mbit/s

So download speed is the same as on any client but upload was bader.

Any ideas?
Cancel
Vote Up 0 Vote Down

Cancel
+1 Vivek Jagad over 2 years ago in reply to Sophos User6847

In that scenario can you check the interface negotiation [duplex -full/half] ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel
0 Sophos User6847 over 2 years ago in reply to Vivek Jagad

Ok - crazy situation.

Setting is on auto negotiation for all ethernet ports,
cli says - for some unknown reason - link mode is only at 100 currently at he the "problem" sg135.

At the other SG135 also auto negotiation is on but link mode is 1000.

I guess i found the problem, but i don't understand why he handle out a slower link mode at the other SG135.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 2 years ago in reply to Sophos User6847

Cheers on that !!
Do you see any drops or errors on that interface ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Sophos User6847 over 2 years ago in reply to Vivek Jagad

No there are no drops or errors ath the WAN interface,
i also set now on 1000baseT/Full but link was down, now i set back on auto neg. but link is still down and not goes up.
But State is Up so its very weird.

I will drive now to the other SG and will disconnect the lan cable from the WAN iface and look whats happen then
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Sophos User6847 over 2 years ago in reply to Vivek Jagad

No there are no drops or errors ath the WAN interface,
i also set now on 1000baseT/Full but link was down, now i set back on auto neg. but link is still down and not goes up.
But State is Up so its very weird.

I will drive now to the other SG and will disconnect the lan cable from the WAN iface and look whats happen then
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Vivek Jagad over 2 years ago in reply to Sophos User6847

from the backend you can also fire the command ifconfig eth2 up

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Sophos User6847 over 2 years ago in reply to Vivek Jagad

It was a incompatible LAN cable which a technican from our ISP connected yesterday after some speed upgrades from the modem to the SG.
I connect now a regular LAN cable and the 1000 connection is on, i just have to solve the problem from the same problem at the LAN iface because its also only on 100 currenty.

I will let you know today if the whole speed problem was fixed - thanks in advance for your help and inputs.
Cancel
Vote Up 0 Vote Down

Cancel