I've been dealing with a crisis at a client with a new XG135. Their bonded T1s (3Mbps) have been jammed fairly continuously inbound, and remote VPN tunnels keep dropping. The XG shows full 3Mbps used on the WAN link, but it apparently doesn't go to the LAN, which shows virtually no traffic. I thought this was another glitch on the XG, so brought in my $20k traffic shaper which in-line on both the LAN and WAN side. It shows almost 3MBPS in HTTP File Transfer, very little BITS (thought we were dealing with a Windows update problem), and it does not show that traffic coming out the LAN side. Where is it? Could that possibly be the updates every two hours of the various Sophos signatures and patterns? Does anyone know how large they are and what protocols used? I tried turning the updates off but so far no effect. When we got on the phone to the carrier, they did a Top Talker and showed 6GB of traffic to Windows Update IPs, my LAN-to-WAN rule counters show about that much traffic, but with the funky things this XG does, I'm not sure if it means what it seems to mean, since the traffic isn't showing up on the port stats. WTH?
This thread was automatically locked due to age.
