Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • +14 person also asked this people also asked this
  • Locked Locked
  • Replies 74 replies
  • Subscribers 45 subscribers
  • Views 18157 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Bandwith Issues Chrome/Firefox/Edge

btdb 
We have been using Sophos intercept x advanced with MTR for about 6 weeks. Since then, our bandwidth has dropped 90%. We use a gigabit internet connection and have previously achieved the following values ​​in a speed test in the browser: Down: 900MB/s Up: 800MB/s

Now, if we're lucky, we'll get Down: 60MB/s Up: 300MB/s.

We found out that it is due to the following settings:

 

If these settings are deactivated, we have full bandwidth when surfing again. But we don't want to leave them disabled.


This is not a condition, the support from Sophos is not getting anywhere either. We expected more...


here are the screenshots from the speedtest:

deactivated settings:
 

activated settings:


This thread was automatically locked due to age.
Parents
  • 0

    Hi!

    Same problem still no solution.
    Core Agent: 2022.4.2.1
    Sophos Intercept X: 2022.1.3.3

    It has nothing to do with "NTP" service.
    1GB duplex lease line reduced to 30Mb/300Mb on client-PC.
    When download large files the "Sophos Net Filter.exe" skyrocketing the CPU usage and the browser (Firefox) becomes very slow.

    Environment: Sophos Central managed Endpoint ( https decryption disabled ).




  • 0 in reply to MysteriousDT

    Hi MysteriousDT,

    Checking your account, you don't have the latest updates for Modern Web Offloading yet.

    I suggest doing the following:
    1. Navigate to the following registry location: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sophos Endpoint Defense\EndpointFlags\
    2. Update the registry value from 0 to 1 on "modernweb.offloading.enabled"

    Test your issue once again. If the updated flag set to 1 does have some improvements in the behaviour you're seeing, I suggest opening a support case with our team to ask that your site be moved to an earlier release group to receive the latest update sooner. 

    I see the last opened case you had with us was closed out in December. Further developments have occurred since that time, so inquiring with support again may help you. 

  • 0 in reply to Qoosh

    Hi!

    I cannot edit the registry key:
    "error writing the value's new contents"
    Is there any other way to enable this feature (modernweb.offloading.enabled)?

  • 0 in reply to MysteriousDT

    Is tamper protection disabled?

    I'd suggest only doing this for testing purposes, as the registry key will revert to the original when policy compliance checks occur.

  • 0 in reply to Qoosh

    Hi!

    Today, we tested with "modernweb.offloading.enabled = 1" , it seems this solves the problem.
    It is possible to make this "on" by default on the Endpoint clients?

  • 0 in reply to MysteriousDT

    If you email support your tenant id from the support page in central with the request they should do it.

Reply Children
No Data
Unfiltered HTML
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?