Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 6 replies
  • Subscribers 29 subscribers
  • Views 802 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

High time to have internet avalaible

AlessandroBlasi

Hello Everybody,

I have a couple of XG330 with OS at version 18.5.1 MR-1-Build326. Everything works well enough but I have some trouble when my people start or restart their computers and log on the domain. The time to have internet avalaible is very very high, sometime it can arrive to 4 minutes.

Same trouble both LAN and WiFI (AP are Sophos APX 320/540)

I use STAS Authentication.
Trying to explain better,  I would like to decrease the time between those two status

 

 --> 

Someone can point me to right direction? Is there some log to check?

Thanks in advance,
Alessandro



This thread was automatically locked due to age.
Parents
  • 0

    Do you have STAS Quarantine enabled? 

    And how many AD Servers do you have? Could one AD server "invalid"? But this would not indicate such a high latency. 

    How fast do you see a authentication request in logviewer after somebody logs in? 

    __________________________________________________________________________________________________________________

  • 0 in reply to LuCar Toni

    Hello Lucar,  

    Thanks for helping me...   

    1) Yes STAS Quarantine are enabled    

    2) I Have 2 DC of 4 enabled with STAS, DC works well and Stas LOG not reporting big issues...

    3) Authentication request is executed pretty fast.

    Following your hint, could be usefull to disable "Restrict client traffic during identity probe", what does that imply?

    Thanks,
    Alessandrp

  • +1 in reply to AlessandroBlasi

    You should disable the quarantine and try again. It could cause this long time until it works. 

    __________________________________________________________________________________________________________________

  • 0 in reply to LuCar Toni

    Ok, Just disabled, let's see how it goes..

  • 0 in reply to AlessandroBlasi

    You need STAS at every DC (if i understand this correct).
    XG don#t ask a DC but the DC (STAS at this DC) forward the logon event to the XG(s). So all logon-enabled DC's should be able to send logon-events.
    Without authentication, your internet-access is more fast?
    (you may create one rule for one PC to test this)


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

Reply
  • 0 in reply to AlessandroBlasi

    You need STAS at every DC (if i understand this correct).
    XG don#t ask a DC but the DC (STAS at this DC) forward the logon event to the XG(s). So all logon-enabled DC's should be able to send logon-events.
    Without authentication, your internet-access is more fast?
    (you may create one rule for one PC to test this)


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?