This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPS (LAN to WAN) makes downloads/uploads slower

I am using Sophos XG home (SFOS 18.0.3 MR-3) as a VM in Proxmox with 6 Gb of RAM with 6 cores CPU (i5-8365U). I have found out if I enable IPS then download speed drops almost 50% and upload around 20%. I have used various IPS system created profiles and I get the same results.

Is this a bug or expected outcome of IPS?

Thanks in advance

This thread was automatically locked due to age.

Top Replies

LuCar Toni over 4 years ago in reply to Arunav Mandal +1

As always: How do you measure the throughput? Did you try to create multiple download at the same time?

Parents

0 rfcat_vk over 4 years ago

Please provide screenshot of the rule and the ips tab from the GUI.

ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Arunav Mandal over 4 years ago in reply to rfcat_vk

Any idea how to solve this?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 4 years ago in reply to Arunav Mandal

As always: How do you measure the throughput? Did you try to create multiple download at the same time?
Cancel
Vote Up +1 Vote Down

Cancel
0 Regex over 4 years ago in reply to Arunav Mandal

From my point of view you should adjust IPS profile to your scenerios. If you set "general Lan2WAN" then many IPS signatures are unneccesery applied. You should always adjust IPS signatures to specific scenerios. Rarly -> you should use generals policies ;) keep that in mind that most of the internet traffic is encrypted. Ive got I5(4core) 4GB or RAM internet spedd 1Gbs/1Gbs and its working great even with lant2wan policies -> i've tested it to make sure. But for most cases im using adjusted policies, lets say if youve got a NAS then you should know what seats on it to improve IPS signatures ;)
Cancel
Vote Up +1 Vote Down

Cancel

Reply

0 Regex over 4 years ago in reply to Arunav Mandal

From my point of view you should adjust IPS profile to your scenerios. If you set "general Lan2WAN" then many IPS signatures are unneccesery applied. You should always adjust IPS signatures to specific scenerios. Rarly -> you should use generals policies ;) keep that in mind that most of the internet traffic is encrypted. Ive got I5(4core) 4GB or RAM internet spedd 1Gbs/1Gbs and its working great even with lant2wan policies -> i've tested it to make sure. But for most cases im using adjusted policies, lets say if youve got a NAS then you should know what seats on it to improve IPS signatures ;)
Cancel
Vote Up +1 Vote Down

Cancel

Children

No Data