Slow browsing after upgrade to Mavericks and SAV for Mac version 9

I've done some testing using speedtest.net with SAV for Mac 9.0.8 on Mavericks (10.9.3).  Quite a lot actually, both in response to your message and regularly during development.

As far as I can tell, the Web Protection features have minimal impact on the results displayed by speedtest.net.  It is however possible that the server selection mechanism used by that site might be tripped up by Sophos's reputation checks (i.e. Block access to malicious websites) causing it to make a non-optimal selection.  This is very unlikely to be more than a theoretical curiousity since every server polled by speedtest.net should perform equivalently.  In any case; you might want to try selecting a specific server rather than rely on polling when evaluating performance of any web filtering component.

The web protection component includes some performance metrics which you might want to enable.  They may help in pointing out why your experience differs from mine.

From a terminal, you would need to enable debug logging for the SophosWebIntelligence process:

  $ ps aux | grep \\bSophosWeb | cut -c 18-23 | while read pid ; do syslog -c $pid -d ; done

  $ syslog -w -k Sender SophosWebD

The log lines look like this:

Jun  5 09:55:47 hostname SophosWebD[12345] <Debug>: Finished (0x7f8dbae9de80): total=1551bytes, lifetime=1643ms, firstResponse=1634ms, businessLogicDelay=1641ms, timeInCache=7ms

total: number of bytes received by the browser

lifetime: time the connection was open; from the 'connect' to the 'close'.

firstResponse: time taken for the first part of the website's response to arrive.

businessLogicDelay: when the web protection feature decided to allow the browser access to the response.

timeInCache: total length of time data was cached by the web protection feature; either because it still had checks to perform, or because the browser wasn't ready to receive it.

This log line is output when each connection is closed.

Things to look out for include high firstResponse values (suggesting network congestion/latency which has nothing to do with Web Protection), and high businessLogicDelay values when 'total' is small (indicating reputation checks are not being made promptly).

Assuming you're comfortable with the above instructions, feel free to share your results so I can help with the interpretation.  Otherwise, let me know which area you need help with and I'll provide some further guidance.

Thanks for getting back to me ... I apologize for my delay.

I tried to run the 2 lines you mentioned and here is what Terminal said:

Last login: Sun Jun 22 10:57:15 on ttys000

danchanlersimac:~ dancy$  $ ps aux | grep \\bSophosWeb | cut -c 18-23 | while read pid ; do syslog -c $pid -d ; done

-bash: $: command not found

danchanlersimac:~ dancy$   $ syslog -w -k Sender SophosWebD

-bash: $: command not found

The delay I am experiencing is, for my purposes, not a major issue ... just wanted to provide feedback.

Thanks, again,

Dan.