Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 2 subscribers
  • Views 2619 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Slow network ASG-RED after upgrade to 8.300

HenrikB
Hi,

Can anyone tell me if I have to update my RED configuration after upgrading to 8.300.

After upgrade the RED connects to the ASG and DNS and DHCP is forwarded. But it is not possible to download files from our fileservers.

I have restored back to 8.203 and now things work again.

/henrik


This thread was automatically locked due to age.
  • 0
    Hi,

    Can anyone tell me if I have to update my RED configuration after upgrading to 8.300.

    After upgrade the RED connects to the ASG and DNS and DHCP is forwarded. But it is not possible to download files from our fileservers.

    I have restored back to 8.203 and now things work again.

    /henrik


    I got into the same issue after upgrading to 8.300! ICMP with 1500 bytes is working fine, but filetransfer, RDP are very slow.
    IPS is deactivated...

    wOLLi
  • 0
    This could be an issue we have seen with some Intel network chipsets. The driver was upgraded in 8.300. This should only affect you if you use bridging.

    A possible workaround is to turn off "generic-receive-offload" on the NICs with ethtool on the command line.
  • 0 in reply to tom_01
    This could be an issue we have seen with some Intel network chipsets. The driver was upgraded in 8.300. This should only affect you if you use bridging.

    A possible workaround is to turn off "generic-receive-offload" on the NICs with ethtool on the command line.


    Tom, could this be the origin of some of the issues we've seen reported in the UBB regarding bridged systems working very slowly after the 8.300 up2date?  Does this affect any of the ASG425a appliances (older or newer) -- I have an instance where this could be an issue.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0
    It's possible. I just spotted the issue in the bug tracker. Not sure about the 425, you might want to check with your local support. For reference, the Mantis # is 20046.

    BTW: workaround is "ethtool -K ethX gro off"
  • 0 in reply to tom_01
    Thanks Tom, I opened a case with Support.  The customer I have in mind can't afford any downtime issues, so that's why I'm making sure this is not an issue for them -- they are the only managed customer I have that runs bridged mode, that's what makes this an unknown for me.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    Is it possible to keep the "fix" on reboot?

    /henrik
  • 0 in reply to HenrikB
    Someone did add a script somewhere (search the forums) that re-applied the fix after every reboot.  The one customer I have that I manage that is affected by the problem does not ever reboot their system (it doesn't need to be) so we haven't modded the system ourselves --- basically waiting for 8.302/8.303 (I think the latter at this point) to include the permanently fixed driver.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    Found the mention of the script -- it's not posted, but you can add your own to init.d  see https://community.sophos.com/products/unified-threat-management/astaroorg/f/52/t/28388

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Unfiltered HTML