Thread Info
  • State Verified Answer
  • +6 person also asked this people also asked this
  • Locked Locked
  • Replies 63 replies
  • Answers 4 answers
  • Subscribers 34 subscribers
  • Views 166337 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Slow downloads on smartphones connected over AP

Jelle

Hi,

we have a WiFi running for our smartphones mainly to update Android and apps. WiFi is offered through an AP55. Only smartphones can connect based on their MAC address. There is an own firewall rule for these connections with the following options active: HTTP scanning, block Google QUIC, detect zero day malware with Sandstorm, Scan FTP.

Unfortunately downloads are very slow. App updates take a long time and Android updates are canceled at a certain point by the smartphone itself.

As all updates are done over secure socket layer protocol and HTTPS scanning is not active I wonder what could be the reason. I checked the IP addresses that are used during update and always got to https://r3---sn-h0jeened.gvt1.com/ and https://r4---sn-h0jeened.gvt1.com/ so I excluded gvt1.com from HTTPS scanning, malware scanning and sandstorm. But also this showed no improvement on download speed.

Currently I wonder if the throughput of the AP55 is that slow?

 

Does anybody have any suggestions? Thanks.



This thread was automatically locked due to age.
Parents
  • 0

    TBH I don't expect MTU to be the root cause of your slowness. Google Play and some other on Android often used services doesn't play well with AV scanning or MITM of the proxy. Especially AV scanning might create delays which can interrupt downloads and let them fail

     

    I collected over time following list of UTL's, which I exculde from everything (HTTPS, Sandstorm and AV and Policy) in the web proxy

     

    ^([A-Za-z0-9.-]*\.)?ytimg\.com\/

    ^([A-Za-z0-9.-]*\.)?gvt1\.com\/

    ^android\.clients\.google\.com\/

    ^play\.googleapis\.com\/

    ^([A-Za-z0-9.-]*\.)?googleapis\.com\/

    ^connectivitycheck\.gstatic\.com\/

    ^([A-Za-z0-9.-]*\.)?googleusercontent\.com\/

    ^([A-Za-z0-9.-]*\.)?ggpht\.com\/

    ^([A-Za-z0-9.-]*\.)?youtube\.com\/

    ^youtubei\.googleapis\.com\/

     

    works fine for me. As I also have Sophos AV (SMSEC) installed on my android phones, bypassing those sites from scanning will not hurt too much. If your phone is updating via mobile networks, you're also no better protected ;o)

     

    /Sascha

     

Reply
  • 0

    TBH I don't expect MTU to be the root cause of your slowness. Google Play and some other on Android often used services doesn't play well with AV scanning or MITM of the proxy. Especially AV scanning might create delays which can interrupt downloads and let them fail

     

    I collected over time following list of UTL's, which I exculde from everything (HTTPS, Sandstorm and AV and Policy) in the web proxy

     

    ^([A-Za-z0-9.-]*\.)?ytimg\.com\/

    ^([A-Za-z0-9.-]*\.)?gvt1\.com\/

    ^android\.clients\.google\.com\/

    ^play\.googleapis\.com\/

    ^([A-Za-z0-9.-]*\.)?googleapis\.com\/

    ^connectivitycheck\.gstatic\.com\/

    ^([A-Za-z0-9.-]*\.)?googleusercontent\.com\/

    ^([A-Za-z0-9.-]*\.)?ggpht\.com\/

    ^([A-Za-z0-9.-]*\.)?youtube\.com\/

    ^youtubei\.googleapis\.com\/

     

    works fine for me. As I also have Sophos AV (SMSEC) installed on my android phones, bypassing those sites from scanning will not hurt too much. If your phone is updating via mobile networks, you're also no better protected ;o)

     

    /Sascha

     

Children
No Data