Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 29 subscribers
  • Views 775 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPS (LAN to WAN) makes downloads/uploads slower

Arunav Mandal

I am using Sophos XG home (SFOS 18.0.3 MR-3) as a VM in Proxmox with 6 Gb of RAM with 6 cores CPU (i5-8365U). I have found out if I enable IPS then download speed drops almost 50% and upload around 20%. I have used various IPS system created profiles and I get the same results.

Is this a bug or expected outcome of IPS?

Thanks in advance



This thread was automatically locked due to age.
Parents
  • 0

    Please provide screenshot of the rule and the ips tab from the GUI.

    ian

    XG115W - v19.5.1 mr-1 - Home

    If a post solves your question please use the 'Verify Answer' button.

  • 0 in reply to rfcat_vk

    Any idea how to solve this?

    Thanks

  • 0 in reply to Arunav Mandal

    As always: How do you measure the throughput? Did you try to create multiple download at the same time? 

    __________________________________________________________________________________________________________________

  • 0 in reply to Arunav Mandal

    From my point of view you should adjust IPS profile to your scenerios. If you set "general Lan2WAN" then many IPS signatures are unneccesery applied.  You should always adjust IPS signatures to specific scenerios. Rarly -> you should use generals policies ;) keep that in mind that most of the internet traffic is encrypted. Ive got I5(4core) 4GB or RAM internet spedd 1Gbs/1Gbs and its working great even with lant2wan policies -> i've tested it to make sure. But for most cases im using adjusted policies, lets say if youve got a NAS then you should know what seats on it to improve IPS signatures ;)

    __________SETUP___________

    HP Small Form Factor:  i5 4Cores, 8Gb of RAM.
    Intel Network Card 5x Eth
    SSD: 256Gb

Reply
  • 0 in reply to Arunav Mandal

    From my point of view you should adjust IPS profile to your scenerios. If you set "general Lan2WAN" then many IPS signatures are unneccesery applied.  You should always adjust IPS signatures to specific scenerios. Rarly -> you should use generals policies ;) keep that in mind that most of the internet traffic is encrypted. Ive got I5(4core) 4GB or RAM internet spedd 1Gbs/1Gbs and its working great even with lant2wan policies -> i've tested it to make sure. But for most cases im using adjusted policies, lets say if youve got a NAS then you should know what seats on it to improve IPS signatures ;)

    __________SETUP___________

    HP Small Form Factor:  i5 4Cores, 8Gb of RAM.
    Intel Network Card 5x Eth
    SSD: 256Gb

Children
No Data