Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Subscribers 27 subscribers
  • Views 1202 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Internet performance of XG106 slow

Jens Greiner

Hi, I have a question about the generell throughput of my XG 106.

Assume my internet bandwidth to be 600 Mbit/s down and 300 Mbit/s up. Regarding to this specs and the number of concurrent users I choose the XG 106.

I have no VPN active so far, SSL/TLS inspection is activated but not working/in use due to the issue mentioned here: https://community.sophos.com/xg-firewall/f/discussions/123153/create-ssl-scanning-certificate-with-macos-10-15-catalina

In general, the appliance is not very busy. But when testing internet speed I get values between 490 Mbit/s down and 290 Mbit/s up maximum while I have a rule switching off everything but logging traffic.

When I use normal rule setup with security features turned on testing the speed results in 170 Mbit/s down and 150 Mbit/s up maximum.

Also, I switched off all firewall, virus scanning etc. on both notebooks I am testing with (MacBook Pro, Win 10).

Now, I would expect regarding to the specs given for the XG 106 to get in almost all situations the full bandwidth or at least being nearby even when having security features turned on.

XG specs

Where am I wrong with my assumptions? Please let me know if you need more details.

Thank you,

Jens



This thread was automatically locked due to age.
  • +1

    Hi Jeans,

    To fully utilize the 600/300 Mbps band, an XG135 or higher would be needed. You always have to look at the weakest performance parameter. By disabling all firewall functions, especially IPS, you can get better transfer, but the question arises - why do I need a firewall then ?

    Regards
    Jan

  • 0 in reply to JanSadlik

    Hi Jan,

    Thank you for your response.

    Sure, to disable firewall functions is not the best idea to proceed with. I did that to get an idea about the amount of the drop in bandwidth the XG is causing.

    Too bad that we are doomed to stick with a much lower bandwidth due to lack of power of the appliance due to the much higher costs of subscription of the mentioned better appliance which is not affordable for us. We wouldn't get more functionality, just acceptable speed. So what. :(

    Thanks,

    Jens