This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSEC vs RED VPN Scalability/Reliability

Hi guys currently use a combination of standalone IPSEC vpn's and GRE/IPSEC tunnels to connect sites.I've run into some documented issues here on the forum with GRE/IPSEC and need to start looking into alternatives.

How well do RED tunnels scale bandwidth wise ? I have a need to connect at > 500 Mbits at a couple of sites which the IPSEC handles pretty well.

Have run a couple of trials via GNS3 and we can lift and shift from a operational standpoint but have no idea how well it performs in the real world.

Currently using Sophos XG 115/450 and SFv 8C16 boxes at the moment.

This thread was automatically locked due to age.

Parents

0 LuCar Toni over 7 years ago

RED Site to Site is not know for his high throughput like IPsec. Also you need to keep in mind, you need Network Protection on all appliances. If you have Network protection, feel free to activate it and test it. It is possible to run IPsec and RED simultaneously.

Keep in Mind, in V17.1 MR2, there is a Bug in HA with RED.

https://community.sophos.com/products/xg-firewall/f/initial-setup/105092/high-cpu-load-with-sfos-17-1-2-mr-2-and-ha

There are couple of Threads about RED vs IPsec in the UTM forum. The RED Module based on the UTM9 module. I do not have any numbers on the performance, but if you test it, we would love to hear some numbers!
Cancel
Vote Up 0 Vote Down

Cancel
0 djdrastic over 7 years ago in reply to LuCar Toni

Thanks for the reply.I'll give it the old college try but really all things considered Sophos has to get IKEV2 IPSEC VTI sorted out now for bigger enterprises , especially those with their feet in AWS,Azure.

From experience with other vendors equipment I'm almost positive that the underlying OpenVPN tech that RED uses will unfortunately not scale out like IPSEC does.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 djdrastic over 7 years ago in reply to LuCar Toni

Thanks for the reply.I'll give it the old college try but really all things considered Sophos has to get IKEV2 IPSEC VTI sorted out now for bigger enterprises , especially those with their feet in AWS,Azure.

From experience with other vendors equipment I'm almost positive that the underlying OpenVPN tech that RED uses will unfortunately not scale out like IPSEC does.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data