Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 3 replies
  • Answers 2 answers
  • Subscribers 29 subscribers
  • Views 853 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG Home - Performance issue

AR IA

Hi Community leaders,

I installed Sophos XG SFOS 18.2, I have issue with the network speed.

After enabling DOS and IPS my internet speed drops to 4-5mbps, by disabling it speed is back to 200mbps. 

Would like to seek experts advise and suggestion on resolving the issue.

I am using i7 Mini PC, Proxmos VE, SFOS 18.2. Sophos is functioning as gateway for endpoint devices. Please suggest how can I improve performance enabling IPS and DOS. 



This thread was automatically locked due to age.
Parents
  • 0

    First, IPS will slow everything down, depending on your CPU's horsepower. It looks like you're running in a VM environment so you have a bunch of potential issues with your hardware and your VM setup that are well beyond the XG software itself.

    You might also want to only run a subset of IPS rules since many may not apply in your environment. (For example, no Macs or no Windows.)

    Second, you need to check if DOS is firing or not. In general DOS is not very useful -- real DOS will be DDOS and will hence not trigger DOS -- and if you set limits too low it will interfere with legitimate traffic. So check the DOS page to see if it is triggering. If it is, it will by design kill network speeds.

Reply
  • 0

    First, IPS will slow everything down, depending on your CPU's horsepower. It looks like you're running in a VM environment so you have a bunch of potential issues with your hardware and your VM setup that are well beyond the XG software itself.

    You might also want to only run a subset of IPS rules since many may not apply in your environment. (For example, no Macs or no Windows.)

    Second, you need to check if DOS is firing or not. In general DOS is not very useful -- real DOS will be DDOS and will hence not trigger DOS -- and if you set limits too low it will interfere with legitimate traffic. So check the DOS page to see if it is triggering. If it is, it will by design kill network speeds.

Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?