This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

AP55C on XG Firewall Home is Sloooooooow

Hi all,

Yesterday I installed an Sophos AP55C on my XG Firewall Home Edition. After about 3 hours of configuring, testing, and reconfiguring, the wifi is majorly slow. I already turned off all the network protection and scanning functions. I tried the 2.4 GHz and 5 GHz combined, and solo but still is very slow. My laptop and my phone have full coverage and the channels are free (checked with wifi analyzer). Does anyone have any more tips of how to speed up my wifi?

greets,

Jeffrey



This thread was automatically locked due to age.
Parents
  • Hi Jeffrey,

    Have you try to change MSS on your WAN Interface to 1410?

    https://community.sophos.com/products/xg-firewall/f/sophos-xg-firewall-general-discussion/76768/unacceptable-guest-wifi-performance-regular-wifi-is-ok/302793#302793

    I have similar issue as you.

    After change WAN interface's MSS to 1410, it resolved my issue.
    (Not LAN, not Wifi, but WAN interface!)

    Shunze

  • Hi Shunze,

    Thank you for your reply, I have not tried this yet. What does the MSS setting do? I would like to understand why manually configuring the MSS setting will make the WiFi perform better. Im gonna try the setting tonight, so I'll let you know the outcome.

    Greets,

    Jeffrey Jaspers

     

    Edit*

    So I answered my own question. I anyone likes to know then read this: https://kb.cyberoam.com/default.asp?id=3098 

  • I have no idea about MSS.

    And don't understand why the MSS 1410 should be changed on WAN interface...

    But it resolve my WiFi slow issue.

    So I only can notice you the chance to try it.

    Good luck~

  • Hi Shunze,

    Yesterday I tried to override the MSS setting to 1410. Further testing needs to be done, but first impression tells me it does not solve the problem. 

    Greets,

    Jeffrey Jaspers

  • Hi Jeffrey,

    Did you check #4 in my guide as suggested in my previous answer?

    Post a picture of the output and the configuration done for AP.

    Thanks

  •   Hi Saching,

    =======================================

    #4- If you have slow browsing/throughput and/or ifconfig (in advance shell) or show network interfaces (in device console) shows errors, collisions, dropped etc., try these steps, in sequence, until your problem goes away:

    1. Confirm that Quality of Service (QoS)' is not limiting bandwidth. QoS has never been setup
    2. When you discover Error on interface output, Edit the interface object, and in the 'Advanced Settings' drop down menu, set the MTU to 1350. If that works, check with your ISP to help find the largest setting that works. If this doesn't work, set the MTU back to its original value. There are no errors in the Interface Output and regarding the MTU setting, see my previous post
    3. If you discover Dropped packets, Change the Ethernet cable. Tried three different cables. No difference
    4. If connected to a switch, change the switch port. The switch is virtual (hyper-v) and I tried to change it to another port on the server. No difference
    5. If connected to a router or modem, change that device. Not connected to router or modem
    6. On the 'Hardware' tab in 'Interfaces & Routing >> Interfaces', experiment with different settings of fixed speeds and duplex. Make the same settings on the router/switch/modem to which the interface connects. Before testing the change, reboot both devices to force them to renegotiate their connection. In version 16.x i cant find the hardware tab
    7. At the end, place a non-manageable switch intermediate to the ISP and Firewall. its a virtual (hyper-v) switch

    ======================================

    the average troughput of my WiFi is currently 6-10MBps

  • Hi, 

    How is AP connected to XG, is it a direct connection or through the Hyper-V switch?

    Thanks

  • Hi Saching,

    It is connected trough the Hyper-V Switch. I'll try tonight to connect it directly and i'll let you know the outcome.

  • Hi Saching,

    I've tried to lower the MSS settings on the WAN interface to 1300, and I tried to directly connect the AP to the firewall without the Hyper-V Switch in between, but it makes no diffrence at all.

    Above is the speed sophos think I got, but i don't know if this is true. I tried a speedtest and below is the outcome. (notice, my WAN down link is 200Mbps and this speed can be made over ethernet)

Reply
  • Hi Saching,

    I've tried to lower the MSS settings on the WAN interface to 1300, and I tried to directly connect the AP to the firewall without the Hyper-V Switch in between, but it makes no diffrence at all.

    Above is the speed sophos think I got, but i don't know if this is true. I tried a speedtest and below is the outcome. (notice, my WAN down link is 200Mbps and this speed can be made over ethernet)

Children
  • , you are a network security engineer at Sophos. Have you seen a AP55C combined with the XG Firewall work at a speed of gigabit wifi?

  • Hi Jeffrey,

    Yes, AP 55C works at that speed. Try to directly connect a system to XG to download a file and verify the throughput. 

    Next step, take SSH to XG and execute, wget http://speedtest.ttml.co.in/files/5M.exe . Post the output.

    Also, try changing the speed negotiation on the hardware. Any luck with the following settings:

    ON virtual appliance , you could not change the interface speed on XG as it does not control the hardware which is your NIC Adapter. These settings is applicable to hardware appliance. Your VM or the ethernet driver have the capability to change the interface speed . 

    How to determine the NIC speed of the ShareScan manager PC:

    Windows XP/ 2003:

    1. Click "Start > Settings > Control Panel".
    2. Select "Network Connections".
    3. Right click on the "Local Area Connection" select "Properties".
    4. In the "Local Area Connection Properties" window, select the "Configure" button.
    5. Select the "Advanced" tab.
    6. In the scroll list of options find "Media Type" and select it.
    7. The NIC speed will be displayed in the "Value" drop down menu.

    Windows Vista/ Windows 7/2008:

    1. Click "Start > Settings > Control Panel".
    2. Select "Network and Sharing Center".
    3. On the right panel select "Change Adapter settings"
    4. Right click on the "Local area Connection" and select "Properties".
    5. In the "Local Area Connection Properties" window select the "Configure" button.
    6. Select the "Advanced" tab.
    7. In the scroll list of options find "Speed & Duplex" or "Link Speed & Duplex" and select it.
    8. The NIC speed will be displayed in the "Value" drop down menu.

    Hope that helps.

  • Hi Jeffery,

    What you are seeing reported is not the actual speed of the link. I have a number of threads open on this subject and been told it is a reporting only issue.

    I have an AP55c and an AP55 both which report the same speed. I bought the AP55 because I though the AP55c was faulty. SO, now I have an AP55 on the UTM which does show performance on 5ghz and an AP55 on the XG which only ever shows 6mb/s. My internet on a good day reaches 6mb/s so I can only test internally if I want some real performance measurements.

    I also note on my MAC Book Pro that the wifi connection drops back to N when idle but when carrying a load changes to ac. Not sure about my android tablet.

  • Hi Sachin,

    You say, "Try to directly connect a system to XG to download a file and verify the throughput. ".

    I have a virtual machine connected trough the XG to the outside world. If I download something from the internet using this VM, the download speed reaches out to the max. So that part works fine. If I send a file from my VM to my laptop (same subnet, but the laptop is on the wifi) the throughput is between 6-10MBps. The same action (laptop still in the same subnet) this time NOT on wifi but connected by an ethernet gigabit cable results in a throughput of 90-100MBps.

     

    The rest of your suggested tests and solutions are clear to me and I'll test them this weekend. I'll let you know what the results are.

  • Hi rfcat_vk,

    Thank you for clearing up that it is only a reporting issue. Do you also have the same issues with the Wifi on the XG as I do? And what is the performance on the UTM, is it better, same, or worse? Thanks!

  • Hi Sachin,

    I set the interface speed to 1.0Gbps full duplex but it made no diffrence at all.

    Also I downloaded the 5M file but their upload is really poor. It was stuck at 500kbps. I Downloaded another file from the internet and you can see the results below.

  • My android tablet wifi speed tester does report that the idle channel bandwidth is 40mb/s, even though the XG shows it a 6mb/s even while downloading updates.

    My setup for the XG is a physical box with intel NICs into a Netgear 8 port POE switch for a work AP and the Sophos AP55. The work AP uses channel 149 and auto channel interference detection.

  • Hi rfcat_vk,

     

    I looked on my laptop, it hase full 5GHz coverage and it says the troughput is "only" 117Mbps. I have that speed with my cheap 20 euro wireless N router. I really believe in Sophos and I stand behind the quality of the products they deliver, but this really is strange. Personally I think the problem lies with the XG software itself, but I don't have any prove of that. 

    My setup:
    - Home made Server running Windows Server 2012 R2 Hyper-V
    - XG Firewall R16.0.2 (latest)
    - AP55c Directly connected to the XG Firewall (through hyper-v virtual switch)

  • Hi Jasper,

    there is a new versionof the AP firmware available. I installed this morning and the 5ghz band came back online without any fiddling. The auto channel now appears to work as the auto channel shows 100. But, bandwidth of the connection still shows 6mb/s.

  • Hi rfcat_vk,

    Thank you for the tip of the firmware. Can you tell me where I can download it? I searched the Sophos website but I have a bit trouble to find it.

    *UPDATE*
    I found it. I should not have looked on the Sophos website but in the XG Firewall

    *UPDATE*
    I can't find any documentation on release 6.0.001, does anyone have the release notes of this firmware?