Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SFOS 18.0.3 MR-3 - DPI performance

Hi,

I have tested a while with DPI engine, but I am a little lost with the perforamance tuning.

With everything off I get 420Mbit

When I enable DPI SSL/TLS inspection with decrypt, IPS Policy LAN TO WAN I can only get 170MBit through.

I have enabled:

console> system firewall-acceleration enable
Firewall Acceleration Enabled Successfully.
console> system firewall-acceleration show
Firewall Acceleration is Enabled.

Any hints on what I made wrong? :-)



This thread was automatically locked due to age.
Parents
  • Our 1Gb connection was installed yesterday so I've been doing some crude speed tests.

    With relation to your issue and your observations so far, I have found Firefox to consistently achieve better download speeds but the difference was dramatically different depending on the speed test site.

    Speedtest.net: Firefox 800 Mbps, Chrome and the new Edge 615Mbps
    xn--bredbnd-ixa.dk/hastighedstest: Firefox 880 Mbps, Chrome and the new Edge 190Mbps

    The issue you are having seems to be more with the testing site you are using than enabling SSL/TLS. It would be interesting to ask them why such a massive difference but I don't speak Danish!

    I actually found a really strange issue. When I disabled SSL/TLS inspection my speeds went from 800 Mbps to 200 Mbps! I'm going to start a new post for this as it has nothing to do with your issue.

Reply
  • Our 1Gb connection was installed yesterday so I've been doing some crude speed tests.

    With relation to your issue and your observations so far, I have found Firefox to consistently achieve better download speeds but the difference was dramatically different depending on the speed test site.

    Speedtest.net: Firefox 800 Mbps, Chrome and the new Edge 615Mbps
    xn--bredbnd-ixa.dk/hastighedstest: Firefox 880 Mbps, Chrome and the new Edge 190Mbps

    The issue you are having seems to be more with the testing site you are using than enabling SSL/TLS. It would be interesting to ask them why such a massive difference but I don't speak Danish!

    I actually found a really strange issue. When I disabled SSL/TLS inspection my speeds went from 800 Mbps to 200 Mbps! I'm going to start a new post for this as it has nothing to do with your issue.

Children