Sophos Red SD-60 Poor lan speeds one way

Question

Hi all, 
 I've added a new RED SD-60 to our network details below. Standard/unified setup. 
 SD-RED 60 10.90.21.0/24 
 Connection throughput 100/100 fibre. 
 XGS2300 192.168.100.0/24 
 Connection throughput 1000/1000 fibre. 
 When connecting the SD-RED 60 we get full speed from the internet/speed tests without issues. But when we do local file trasnfer from the XGS2300 range we get max 1mb/s nothing more, lodged ticket with sophos and spent many hours with no result yet, any one have some ideas? 
 I'm aware of the speed limitations of the Red devices, but we should be getting more than 1mb from lan traffic. 
 Thanks!

emmosophos · Answer

Hello Kent, 
 Thank you for the Case ID. 
 Can you run this command from the console of your Sophos Firewall and try again the to replicate the issue: 
 console> set ips ac_atp exception fwrules 2 
 Substitute the 2 for the Firewall rule you are using to pass traffic from the RED to the LAN. 
 This command disables any additional check that the Sophos Firewall does for IPS; this would help rule out the issue with the Firewall side. 
 Regards

jprusch · Answer

Maybe it's fragmentation happening here. Try to lower MTU size on the links. 
 This would explain to me that the packets coming out of order.

jprusch · Answer

Hi Kent, 
 it is not that easy, but I try: in principle every component along the route can cause your bottleneck with an MTU size being too small. 
 You could start with the tunnel definition for the RED. But you should then reduce the MTU of the clients behind that tunnel as well. 
 We had a customer with Telekom DSL and RED, some homeoffices ran without any problems, other sites had to be reduced to 1280 bytes at the RED tunnel definition. It depends from site to site for him. 
 For Windows-Clients, we have a script to set the MTU, that I could send you. 
 You could start with 1280 and then try to get to higher numbers.

Sophos Red SD-60 Poor lan speeds one way

Top Replies

Submitted a Tech Support Case lately from the Support Portal?