Slow Internet Speeds

Question

Hello World, 
 
 I replaced my CheckPoint firewall with the Sophos XG firewall. With CheckPoint I was averaging about 800mb down and 900mb up. I have a 1GIG fiber connection. With sophos i'm struggling to get 300mb down and just over 500mb up. 
 
 I recall seeing an article or two on the best recommended settings to achieve the fastest internet speeds possible via the Sophos XG firewall. 
 
 Anyone know where I can relocate the KB and/or does anyone have any recommended settings I could use to achieve the highest speeds possible. 
 
 I searched several speed related post in this community and tried several to no avail. 
 
 Thanks for all responses.

SanjayD Patel · Answer

Hi BobbyDigital, 
 
 There are no defined steps to check on issues with speed, so we usually try multiple ways as mentioned below:

Try checking how much speed we are getting from ISP on XG's console using below command. 
 wget --no-check-certificate -O - raw.github.com/.../speedtest_cli.py | python 
 
 1) Try Creating a plain firewall rule and ensure the traffic flows through the same. everytime use incognito window to check the same. 
 2) Check DNS settings and test the same from sophos GUI. 
 3) Try turning off Strict Policy using below command. 
 Console>set advanced-firewall strict-policy on/off 
 4) Try tweaking "set advanced-firewall" parameters. 
 5) Toggle application classification / microapp discovery using below commands. 
 system application_classification on/off 
 system application_classification microapp-discovery on/off 
 6) Check for drop packets. 
 7) try turning off AV, IPS and application classification. 
 8) try changing port negotiation from Auto to 100 Full n 100 Half ( This is only recommended when you are infront or nearby the device as you may lose connectivity) 
 9) try changing MSS from 1460 to 1452 and to 1280 MTU MSS ( This is only recommended when you are infront or nearby the device as you may lose connectivity) 
 
 Below KB from Cyberoam can be useful to test various methods. 
 https://community.sophos.com/kb/en-us/131244 
 
 If none of them helps then I feel you need check the sizing. 
 Try opening a support case at "support@sophos.com" to investigate further. 
 Before opening the ticket, ensure you have the output or proof, where in you can prove that you were getting higher speed before swapping. 
 
 Regards, 
 Sanjay