This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IE Slow Behind Sophos

Hi everyone,

I have had an issue with IE on all computers behind our Sophos UTM box for over 2 years now. We simply accepted the issue and moved on. The issue is, when browsing to a webpage, IE takes forever to load! This issue doesn't affect any other browser but our tools require Active X's to work so we are forced to use IE. I have tried:

Turning off IPS

Turning off Web Protection

Turning off Application Control

Creating QOS Rules

Resetting winsock on our PCs

And many more things!

 

I've looked at every log possible and I cant seem to figure it out. Sophos has alot of great features, alot of which we use but this issue is starting to get worse and is going to force us to go with another vendor. The workstations we use vary from Win7 to Win8. Sometimes they have the issue, sometimes they don't.

We currently run IPS, Web Protection, Application Control. 

IPS has never been messed with besides adding our networks

Web Protection has never been messed with. Runs in Transparent mode with no authentication and doesn't block on authentication fail

Application Control has been turned on and blocks windows updates (windows updates break our tools)

We also use the sophos AV included with the UTM. We keep the UTM up to date, 9.411-3 running right now. 

 

I'm begging for help! I cant seem to find the issue!

 

Thanks

Brandon



This thread was automatically locked due to age.
Parents
  • I can appreciate your frustration.   For the sake of those who might read your post and panic, I can say that I have not seen this problem during our two years running UTM, and we have used it with a mix of IE versions (and other browsers) during that time.

    I assume that you have checked the dashboard and do not see a CPU, memory, or disk space problem.   If you had a CPU issue, it would seem that disabling those items would have resolved the problem by now.

    You probably need to explain how your proxy is configured:   proxy script in browser, proxy redirect in browser, or in-line transparent proxy.  

    • If you have transparent proxy enabled, you probably want to ensure that the browser is not also connecting directly using automatic configuration, proxy script, or proxy redirection (Internet Options... Connections... LAN Settings).   I don't know that redundant settings are a problem, but I can imagine that they might be.

    • If your most important sites are also highly trusted, you could try bypassing the proxy for only those sites.  The problem may be specific to your target sites.
      • If you use a proxy script, put the exception sites into the script.
      • If you use transparent modes, put the exception sites into Web Protection... Misc... Transparent Mode (Destination) Skip List.

    Then test to see if the less important sites behave comparably between IE and Chrome.

    Hope that helps some.

  • Hello,

    Thanks for the quick reply. 

    I have tried running IE with auto config on/off - no difference. 

    We don't run a proxy script. We try to keep things very simple here.

    It occurs with all websites. Sometimes it even shows "Page cannot be displayed". I've tried windows "Fix connection issues" tool but its never able to see an issue. 

    I can ping google just fine with quick responses but if I try to browse to google, IE hangs. 

     

    Brandon

  • Hi Brandon,

    some ideas to identify from which component the problem comes from:

    - Disable WebProtection and allow one or all clients in the firewall to access the web. If it's fast then, the problem has to do with the WebProtection. Check the WebProtection log for a request, which takes a long time to load, and post it here.

    - Start IE and press F12 to open the DevTools. Try to open a page and take a look to the "Network" tab, which contains all requests and their needed times to load. Is there a request with abnormal long time?

    - Start IE without AddOns.

    - Reset settings of IE

    Jas

  • Hello,

     

    I tried doing that. Turned off web filtering and application control - no difference. 

    I did the test with IE. It holds on "Waiting for "Title of Webpage". The connection times that appear below don't show anything abnormal. IE just hangs for awhile like its waiting to connect, then once it connects the page appears very quick!

    Tried resetting the settings and running without addons. No difference.

     

    Thanks

    Brandon

Reply
  • Hello,

     

    I tried doing that. Turned off web filtering and application control - no difference. 

    I did the test with IE. It holds on "Waiting for "Title of Webpage". The connection times that appear below don't show anything abnormal. IE just hangs for awhile like its waiting to connect, then once it connects the page appears very quick!

    Tried resetting the settings and running without addons. No difference.

     

    Thanks

    Brandon

Children
No Data