SFOS 15.01.0 MR-3 - after update download and upload bandwith issue

Hi,

I got tired of the new releases not fixing much. I agree with your bandwidth issue, except I started out with 4mb/s and ended up with 2.5mb/s.

After replacing the hardware with the older e3 based version I re-installed utm 9.4, immediately download speed is over 4mb/s, modem does show 6mb/s. We browsing is faster, mail handling doesn't lockup the MAC causing mail client to crash. AP's register correctly. My UTM has way more features enabled than the XG.

I might restore the i3 MB after XG v16 is released to beta.

Same issue here. Granted I only have one client that I use for large downloads behind XG. I have been waiting for XG to mature before fully incorporating it in my network and I didn't realize the bandwidth issues till I just tested.

Its a sad state of affairs at XG headquarters. Almost ONE YEAR after the initial partner beta, we are fighting trivial bandwidth problems. The fixes in MR releases have been mostly under the hood and there have not been ANY of the fast paced updates to make Copenicus (SFOS/XG) into a serious firewall product that was promised earlier during the initial launch. I feel sorry for the resellers if they fell for the NEXT GEN hype and deployed this at any of their customers. Simple things that have worked since atleast v8 in the UTM/astaro don't work or act strangely in XG.

Now all the hopes are pinned on XG v16. We were ignored when the shortcomings of XG interface were brought up. Now they are going to rewrite the GUI but at this point, GUI is not the ONLY problem XG has. Something is really wrong with the code and the clunky GUI just adds to the frustration of doing simple tasks. Sophos needs to stop with the Gartner magic quadrant hype of NEXT Gen Firewalls and accept the fact that NEXT GEN is just a fancy word for people who didn't have a competing UTM product when astaro was the leader. Now the competitors are finally jumping in the UTM market and calling themselves NEXT GEN firewalls. Nothing NEXT GEN about them other than marketing hype and calling their products UTMs would be oh so last decade... [:$]

I can keep on expressing my frustrations with XG but to be honest, I have almost given up on it. I update it when the update shows up and test it for a second or two but there is no excitement that I usually feel when a new OS is released. UTM9 is so far advanced in every category than XG and I never saw any of the NEXT GEN performance increases that were promised with XG. Sad Sophos is re-inventing the wheel again with horse and carriage (XG) when they have a racing car (UTM9) sitting in the garage.

Regards.

Hi Biliybob,

try disabling the tcp flood in IPS.

Thanks for the workaround. I will probably move straight to beta but makes me wonder if the TCP flood protection is the cause of the problem, was it working correctly in previous releases?

Regards

just for your Information,

i have this issue even having all security features disabled (no web-Proxy, no IPS etc.).

so only one fw rule with nat -> bandwith issue.

Moving back to MR2 -> everthing fine.

I had to specifically disable the tcp flood protection because turning of IPS had no affect.

My MR2 throughput was bad, MR3 was almost unusable.

I had to specifically disable the tcp flood protection because turning of IPS had no affect.

My MR2 throughput was bad, MR3 was almost unusable.