This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Slow downloads on SG210

Hello, 

Just checking if anyone has any ideas on a slow connection through my UTM (v 9.351-3)

We recently got CenturyLink fiber and we are experiencing slow speeds overall (about 90Mbs down/40Mbs up)

I have disabled all AV scanning, webfiltering, IPS, Qos, ATP, any anything else I can think of but nothing has made a difference.  We don't use end point protection as we use the cloud version for that.

CL support mentioned that they see the link at 1000/Full on their juniper's port that the UTM is connected to.

I did plug my laptop directly on CL's juniper router after talking to CL's support and I got significant better performance (700+ Mbps down/900+ Mbps up) so the bottleneck is on my UTM.

Any ideas/suggestions will be appreciated but I hope that my SG210 just can't handle the bandwidth.

Thanks!

Luis.



This thread was automatically locked due to age.
Parents
  • Luis, you'll never get anywhere near those speed through a 210 with Web Filtering and IPS enabled.

    I would have expected you to get better speed with your test though.  Sometimes, those Cisco routers and the UTM keep trying to negotiate speed/duplex.  Some Ciscos can't be configured for 1GB/Full, only 100MB/Full.  Have them configure a fixed setting, match it for the UTM's interface and then test.  Any better performance?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Luis, you'll never get anywhere near those speed through a 210 with Web Filtering and IPS enabled.

    I would have expected you to get better speed with your test though.  Sometimes, those Cisco routers and the UTM keep trying to negotiate speed/duplex.  Some Ciscos can't be configured for 1GB/Full, only 100MB/Full.  Have them configure a fixed setting, match it for the UTM's interface and then test.  Any better performance?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • Bob, I will have CenturyLink try that.
    The juniper router from CL has another open port that they enabled during the troubleshooting. Would it help if I create a LAG and plug another NIC on the SG210 to that other port on the juniper?
    Other than the bandwidth limitation I don't see more than 50% CPU or 30% memory utilization at any given time.
    Also, I downloaded an image of the XG firewall and installed it on an old Dell 380 I had around. My tests with it are giving me about 460Mbps down/45Mbps up.
    Would it be worth to replace my UTM with an XG210 or 230 (can't afford more than that)?
    Thanks for the reply.
    Luis.