Sophos Firewall: v18.5 MR2: Feedback and experiences

Hi folks,

I have installed this version on my xg115W and it is not working well. I have tried a number of different configurations. The aim was to replace my home XG with this new box. I built a configuration based  on my existing system but with many cleaned up and refined policies and firewall rules. That was a disaster, throughput for speediest max'ed out the line, but web surfing, just did not work at all well, pages took many seconds and sometimes minutes to load and more often timed out leaving online payments in limbo.

A restart partially fixed the issue but not completely.

The logviewer showed many failed to associate connection errors.

I removed over 50% of the configuration and in a lot of cases used the default XG provided policies with my firewall rules. With one user connected works well, while not as quick with page loads as my existing XG, still worked.

I moved my IoT network across again after refining and reducing the configuration and end up with poor connection times and lots of cannot associate errors in the logviewer.

So, the conclusion I have come to is that this version of XG software is not suitable for my XG115w with a full business licence.

My IoT network has 7 wifi devices and 5 fixed devices, which most are not always active or powered on.

Ian

Same here with a XG115w, in reality I just wished the WebUI has a "little" bit faster. (I can make a coffee with the time It takes to create and apply a new WAF Rule.)

What are we discussing here. Connection delay or Webadmin responsibility? 

We are talking about device performance both to users and the gui performance.

ian

LuCar Toni said:

Connection delay or Webadmin responsibility? 

Both, but the most noticeable is the WebUI.

Just navigating over It will use 100% of a single core constantly. (Without changing any settings or rules.)

As an example, the XG115w took 1 minute and 27 seconds to create a new WAF Rule; On my old box with a 3300x It would take around ~6 seconds.

Of course, the Ryzen 3300x is around ~7 times faster, but even then, this should not be the reason on why It is so slow to change an Apache config file and restart the service.

Is the firewall doing anything under the hood to take so much time to do (apparently) simple tasks?

If you're doing nothing but watching the Diagnostics > System Graphs, what kind of utilizations are you seeing? Have you tried doing a `top` to see what the top processes are? It sounds like the web server is slow, but I'm wondering if other processes are kicking in. I've noticed at various times `snort` will decide it wants to do a lot that I think isn't directly related to traffic. Or after an upgrade it seems to be a little busy for some period of time.

(On my XGS87, it does about 15% with various spikes, with a fairly small network.)

If you're doing nothing but watching the Diagnostics > System Graphs, what kind of utilizations are you seeing? Have you tried doing a `top` to see what the top processes are? It sounds like the web server is slow, but I'm wondering if other processes are kicking in. I've noticed at various times `snort` will decide it wants to do a lot that I think isn't directly related to traffic. Or after an upgrade it seems to be a little busy for some period of time.

(On my XGS87, it does about 15% with various spikes, with a fairly small network.)