This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Site-to-Site VPN - Speed

zeus1976 over 8 years ago

Hello,

Due I have to transfer 100 GB to my friend recoginized that the upload is very slow (1.57 Mbps) into an VPN Tunnel. Site A (Home) ->> friend (Upload my data from home). I have disabled all feature and check following configuration:

- Web-Proxy disable

- Application Control disable

- Intrusion Prevention disable

- QoS disable

- activate in the VPN configuration "Support path MTU discovery"

- checked the Internet speed without VPN: Download 220 Mbps / Upload 23 Mbps

- changed the MTU to 1392 (Cablecom Modem) & UTM

Question:

Have the cablecom modem and the Sophos UTM the same MTU Size? At the moment everthing is 1500 or I testet 1392 on both devices.

Notice: Internet connectin is 250 / 25

Do you know this issue? Any ideas what I can check?

Thank you for your help.

Best regards

This thread was automatically locked due to age.

Parents

0 BAlfson over 8 years ago

Does #7 in Rulz give you any hints?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 zeus1976 over 8 years ago in reply to BAlfson
Hello Bob,

Thank you for your answer. In the meanwhile I did another check (FTP Access to my Location):

Location Home:

FTP Server - NAT Rule - Firewall Rule (FTP Server is a Synology Server)

Location B:

Access from Location B to Location A (FTP Server from Location Home - Download a File) (1GB)

Speed Result: 22 Mbit (Upload max 25Mbit)

Now everthing is pointing to the VPN Connection and after checking the list from Bob I can exclude the follwing points:

1. NIC Problem is excluded

2. QoS is not the problem

3. Fullduplex is not the problem

4. Switches are all ok

Remark: MTU Change on the WAN Side didn't help unfortunately. Have somebody another idee? Thank you for your help.

Best regards
Cancel
Vote Up 0 Vote Down

Cancel
0 zeus1976 over 8 years ago in reply to zeus1976

Hello,

Somebody have an idee?

Thx.

Best regards
Cancel
Vote Up 0 Vote Down

Cancel
0 sachingurung over 8 years ago in reply to zeus1976

Hi,

Take SSH to UTM and execute:

wget --no-check-certificate -O - https://raw.github.com/sivel/speedtest-cli/master/speedtest_cli.py | python

Verify the upload speed received from ISP on UTM directly. If that looks good, fine tune IPS settings and rule age.

Let us know if that helps.

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 sachingurung over 8 years ago in reply to zeus1976

Hi,

Take SSH to UTM and execute:

wget --no-check-certificate -O - https://raw.github.com/sivel/speedtest-cli/master/speedtest_cli.py | python

Verify the upload speed received from ISP on UTM directly. If that looks good, fine tune IPS settings and rule age.

Let us know if that helps.

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 zeus1976 over 5 years ago in reply to sachingurung

Hi,
The problem had solved itself - but recently I have the same problem again - have the same results again (as above). Now I wanted to do your tests on the CLI, but the speed test is no longer available, can you put it online again?

Thank you for your valuable help.

Best regards
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 5 years ago in reply to zeus1976

I recommend putting such things in /home

cd /home
wget https://raw.githubusercontent.com/sivel/speedtest-cli/master/speedtest.py --no-check-certificate

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Connie Sybil over 5 years ago in reply to sachingurung

sachingurung said:

Hi,

Take SSH to UTM and execute:

wget --no-check-certificate -O - https://raw.github.com/sivel/speedtest-cli/master/speedtest_cli.py/MyKFC | python

Verify the upload speed received from ISP on UTM directly. If that looks good, fine tune IPS settings and rule age.

Let us know if that helps.

Thank you so much for sharing such a useful information. I will definitely share this with others.
Cancel
Vote Up 0 Vote Down

Cancel