Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 14 replies
  • Answers 1 answer
  • Subscribers 31 subscribers
  • Views 12215 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Slow Internet Speeds

BobbyDigital

Hello World,

 

I replaced my CheckPoint firewall with the Sophos XG firewall. With CheckPoint I was averaging about 800mb down and 900mb up. I have a 1GIG fiber connection. With sophos i'm struggling to get 300mb down and just over 500mb up. 

 

I recall seeing an article or two on the best recommended settings to achieve the fastest internet speeds possible via the Sophos XG firewall. 

 

Anyone know where I can relocate the KB and/or does anyone have any recommended settings I could use to achieve the highest speeds possible.

 

I searched several speed related post in this community and tried several to no avail. 

 

Thanks for all responses. 



This thread was automatically locked due to age.
Parents
  • 0

    Hi BobbyDigital,

     

    There are no defined steps to check on issues with speed, so we usually try multiple ways as mentioned below:

     

     

    Try checking how much speed we are getting from ISP on XG's console using below command.

    wget --no-check-certificate -O - raw.github.com/.../speedtest_cli.py | python

     

    1) Try Creating a plain firewall rule and ensure the traffic flows through the same. everytime use incognito window to check the same.

    2) Check DNS settings and test the same from sophos GUI.

    3) Try turning off Strict Policy using below command.

    Console>set advanced-firewall strict-policy on/off

    4) Try tweaking "set advanced-firewall" parameters.

    5) Toggle application classification / microapp discovery using below commands.

    system application_classification on/off

    system application_classification microapp-discovery on/off

    6) Check for drop packets.

    7) try turning off AV, IPS and application classification.

    8) try changing port negotiation from Auto to 100 Full n 100 Half ( This is only recommended when you are infront or nearby the device as you may lose connectivity)

    9) try changing MSS from 1460 to 1452 and to 1280 MTU MSS ( This is only recommended when you are infront or nearby the device as you may lose connectivity)

     

    Below KB from Cyberoam can be useful to test various methods.

    https://community.sophos.com/kb/en-us/131244

     

    If none of them helps then I feel you need check the sizing.

    Try opening a support case at "support@sophos.com" to investigate further.

    Before opening the ticket, ensure you have the output or proof, where in you can prove that you were getting higher speed before swapping.

     

    Regards,

    Sanjay

Reply
  • 0

    Hi BobbyDigital,

     

    There are no defined steps to check on issues with speed, so we usually try multiple ways as mentioned below:

     

     

    Try checking how much speed we are getting from ISP on XG's console using below command.

    wget --no-check-certificate -O - raw.github.com/.../speedtest_cli.py | python

     

    1) Try Creating a plain firewall rule and ensure the traffic flows through the same. everytime use incognito window to check the same.

    2) Check DNS settings and test the same from sophos GUI.

    3) Try turning off Strict Policy using below command.

    Console>set advanced-firewall strict-policy on/off

    4) Try tweaking "set advanced-firewall" parameters.

    5) Toggle application classification / microapp discovery using below commands.

    system application_classification on/off

    system application_classification microapp-discovery on/off

    6) Check for drop packets.

    7) try turning off AV, IPS and application classification.

    8) try changing port negotiation from Auto to 100 Full n 100 Half ( This is only recommended when you are infront or nearby the device as you may lose connectivity)

    9) try changing MSS from 1460 to 1452 and to 1280 MTU MSS ( This is only recommended when you are infront or nearby the device as you may lose connectivity)

     

    Below KB from Cyberoam can be useful to test various methods.

    https://community.sophos.com/kb/en-us/131244

     

    If none of them helps then I feel you need check the sizing.

    Try opening a support case at "support@sophos.com" to investigate further.

    Before opening the ticket, ensure you have the output or proof, where in you can prove that you were getting higher speed before swapping.

     

    Regards,

    Sanjay

Children
No Data