Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Not Answered
  • +2 person also asked this people also asked this
  • Locked Locked
  • Replies 24 replies
  • Subscribers 49 subscribers
  • Views 25436 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL VPN Connection Slow (warning large screenshots)

Paul C1

Hi All,

 

I am experiencing very slow SSL VPN speeds (10x slower than internet upload speed, 70x slower than internet download speed). I read almost all posts I could find, but no solution worked.

Can you help me out?

 

Thanks,

 

 

Here is what I have as a setup:

Hardware: Qotom q355g4, 6GB RAM, 120GB SSD, (Sophos XG runs directly on the hardware)

Internet connection:

Resource usage:

Transfer speeds on the VPN (both download and upload):

SSL VPN UDP Settings:

 

VPN to LAN  rule:



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to Regex

    I'm not doing split tunneling, all traffic goes to the firewall for inspection.

    Also, I'm not doing SSL/TLS Decryption right now over VPN users, but I'll be doing it later.

    Regex said:
    and do you use compression ?

    No, compression over SSL VPN is known to have vulnerabilities, I don't trust it.

    Thanks!

    If a post solves your question use the 'Verify Answer' button.

    Ryzen 5600U + I226-V (KVM) v21 GA @ Home

    Sophos ZTNA (KVM) @ Home

  • 0 in reply to Prism

    Well I'm also not using compression but as you "as a gateway(TCP not UDP)" and i can see much better performance . I'll test it later from another location - Im a home user :D
    Thx for sharing !^^

    __________SETUP___________

    HP Small Form Factor:  i5 4Cores, 8Gb of RAM.
    Intel Network Card 5x Eth
    SSD: 256Gb

  • 0 in reply to Regex

    Thank you very much.  I am also not using any compression, SSL/TLS inspection turned off and running SSL over UDP.

Unfiltered HTML