SSL VPN Connection Slow (warning large screenshots)

Any solutions after 5 Month now? I have the same trouble.

Hi

SSL VPN poor performance has been solved in 17.5 mr14 !

No, its not been solved.  Sitting on SFOS 18.0.1 MR-1-Build396 and its still slow.  Still looking for a resolution if anyone has anything.

Hi Jaco de Klerk,

It has been fixed on v18 MR2.

I'm using TCP, AES-256-CBC & SHA256.

Thanks!

How do you have configured it, as a gateway or split tunneling ? and do you use compression ?

I'm not doing split tunneling, all traffic goes to the firewall for inspection.

Also, I'm not doing SSL/TLS Decryption right now over VPN users, but I'll be doing it later.

Regex said:

and do you use compression ?

No, compression over SSL VPN is known to have vulnerabilities, I don't trust it.

Thanks!

Hi Prism, Where did you get v18 MR 2?  I have a XG 210 and there is no updated firmware available yet.

I have mine configured as a gateway.

Well I'm also not using compression but as you "as a gateway(TCP not UDP)" and i can see much better performance . I'll test it later from another location - Im a home user :D
Thx for sharing !^^

Thank you very much.  I am also not using any compression, SSL/TLS inspection turned off and running SSL over UDP.

I suggest you to wait for v18 MR3 which should be released soon, v18 MR2 has a "beta release".

Well, I found no bugs or issues with it, It even fixed a lot of issues I've been having with SSL/TLS Decryption.

But if you really want to upgrade to it, then you can download the update file from "MySophos".

Thanks!

I suggest you to wait for v18 MR3 which should be released soon, v18 MR2 has a "beta release".

Well, I found no bugs or issues with it, It even fixed a lot of issues I've been having with SSL/TLS Decryption.

But if you really want to upgrade to it, then you can download the update file from "MySophos".

Thanks!

Awwsome, thanks, will maybe try it and see if it makes any difference over the next few days.  I also see in other posts that they say you should run off UDP Flood Protection.  Where do you do that?

Inside DoS & Spoof Protection, on the "Intrusion Prevention" Tab; It's disabled by default.

Thanks!

Thank you very much.  I have checked and nothing is ticked in there.  i have also added a DoS bypass rule for my VPN range, just in case.

Can you post this rule  here as example ?;)

Just a quick update, since I have added the  DoS bypass rule for my VPN range, my speed has gone up over the VPN from under 1mb/s to anything from 2 to 4 mb/s.