VEEAM issues with Sophos XG

Question

Hi all, 
 
 I have a sophos XG 105 in brigde mode to protect my servers in the datacenter. 
 
 For some reason VEEAM replication is a nightmare with a sophos XG in place. 
 First of all, when you enable IPS, it breaks the VEEAM replication, so this is something that I had to disable. 
 As soon as I did that, at least VEEAM worked again. 
 
 So based on that I made a firewall rule between both the netwerk, to not scan, no IPS, no filtering, no application control, nothing at all, just allow everything and every service. 
 
 Now obviously VEEAM works, but I only get speeds of between 4 en 5 MB (megabytes) per second. 
 Both sides have gigabit uplinks to the internet, so there is no reason to not get higher speeds. 
 
 How do I start troubleshooting why I'm getting such low speeds? 
 And yes if I bypass the sophos, I get much much much higher speeds ...

HuberChristian · Accepted Answer

According your Printscreen and your Configuration you should definitely reach more than 3-5Mbps. As you stated... All Advanced-Policies like IPS/ATP/AppControl are switched off, so this measure should result approximately in "Firewall Troughput Speed". 
 
 I'd advise you to check why traffic is dropped. This can be figured out using drop-packet-capture. See https://community.sophos.com/kb/en-us/127111 Maybe you also should have an eye on the MTU... 
 
 PS: What ever Sophos states in their Datasheet about troughput. I wouldn't use an XG 105 even in that scenario you described. XG 105 suits well for a Branch office up to 5 Users where no advanced Policies should be used. For anything else, it's not suited. That's my personal mind and I'm not a Sophos Employee.