This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Download at Router 80MB, max 30MB at clients

A few months ago, this connection was achieving 50-60MB download speed to clients. No major changes, other than new versions of SFOS, which is currently on v17.5

As a test, I disabled all DOS settings, gave one machine high Priority in Traffic Shaping, turned off all in Web and Malware scanning, no intrusion prevention, web policy or application control, disabled Advanced Treat Detection. Made the situation worse and only saw 10MB using an Internet Speed Test.

Am at a loss, no idea what to check next. I understand that the firewall will reduce speed because of all that it does, but surely not this dramatic?

I have seen people raising similar questions before, but none seem helpful to me. Any suggestions would be welcome.

Paul

This thread was automatically locked due to age.

Parents

0 rfcat_vk over 6 years ago

Hi Paul,

a couple of things to check

1/. the MTU setting hasn't changed during the upgrade

2/. that the WAN interface is set to auto-negotiate. Maybe a faulty or not fully homes connector?

Ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 rfcat_vk over 6 years ago

Hi Paul,

a couple of things to check

1/. the MTU setting hasn't changed during the upgrade

2/. that the WAN interface is set to auto-negotiate. Maybe a faulty or not fully homes connector?

Ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Paul Digby over 6 years ago in reply to rfcat_vk

Should have mentioned that the Firewall has a Draytek in front of it, that makes the internet connection. The Draytek then simply forwards all traffic to firewall and Firewall in turn forwards on to Draytek

1 - Did not set MTU original so do not knw if relevant but is currently 1500

2 - WAN interface is on Auto Negotiate and does show connected at 1000MB
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 6 years ago in reply to Paul Digby

Hi Paul.

I assume the Draytek is in router mode? What speeds do you see when you connect directly to the Draytek? Yes, I am aware that you originally posted you see 80mb/s download when connected other router, but something must have happened to the router that caused such a change? What functions in the router do you use?

Please provide a simple network drawing of your connections.

Thank you

Ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Paul Digby over 6 years ago in reply to rfcat_vk

No functions on router used.

Basically, the Draytek 2862 forwards all traffic onto the Sophos Firewall and the interface on the Sophos Firewall forwards on to the Draytek. Its as simple as that.

I shall try to test directly from the router side and think I just have to turn off the forwarding to Sophos Firewall. Will update a bit later
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 6 years ago in reply to Paul Digby

Hi Paul,

in that case put the Draytek into bridge mode and that will get rid of one player of NAT.
ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Paul Digby over 6 years ago in reply to rfcat_vk

Didn't get as far as testing regarding Bridge mode!

I managed to get a connection to work directly into the Draytek and similar speed for download!!!

Next step is to connect supplied router provided by ISP and test. ISP will not troubleshoot otherwise.
Cancel
Vote Up 0 Vote Down

Cancel
0 Paul Digby over 6 years ago in reply to rfcat_vk

Been doing some more testing. Very strange results (perhaps not)!

60MB - direct to ISP provided equipment
60 MB - direct to Draytek

10-20MB - through Sophos XG105

My next step will be to remove all apart from one connection on the switch and see if that makes a difference to identify perhaps a piece of equipment causing heavy traffic or something.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 6 years ago in reply to Paul Digby

Try to perform a download on XG shell.

This reveal sometimes the truth.

https://stackoverflow.com/questions/12714584/wget-time-measurement/19113627

https://lifehacker.com/how-to-test-your-internet-speed-with-a-terminal-command-1364123567

(Performed in Advanced Shell).

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel