XG cuts bandwidth to the half

hello,

Have you try to disable IPS or DoS protection ?

I've this problem when my Dos protection is enable and not correctly configure.

HI

I'm not sure I know how to do so In the protect / Intrusion Prevention page

thanks

cyril

Hi,

We are facing the same issue, WAN speed can only achieve about half of the subscribed speed. Which is about 400mbps over a 800mbps line and Sophos engineer failed to rectify the issue.

Any update in this thread?

We are using XG125. Sophos support case ID: 8977402

Thanks.

Rgds,

KL

Hi KL,

Parameters XG125 (below) indicate that 800 Mbps is unattainable. In my experience for XG125 rev.2 with protection functions enabled it is max 450 Mbps. XG125 rev.3 should be a bit faster. The heavy load causes IPS. It should be noted that IPS works even when it is not used in rules. You can disable the IPS service but is this a good solution?

rev.2

rev.3

Regards
Jan

Hi, Jan,

Noted your prompt response which also explained why Sophos support unable to assist as we have hit the hardware limit of the XG125 Rev.2

We are now getting precisely 450mbps and that is a little low considering we paid for an 800mbps line.

What would be your suggestion? Replace with XG125 Rev.3? Or XG135? Or we can never get 800mbps due to the IPS overhead unless we get 1.6Gbps line, just to get 800mbps..

Your suggestion is much appreciated.

Thank you.

Rgds,

KL 

Hi KL,

Currently only XG125 / 135 rev.3 are sold. To make full use of the 800 Mbps band, XG135 rev.3 would be needed (XG125 has weaker parameters, especially AV proxy). For the 1.6 Gbps band, an even more powerful XG210 would be needed. You need to consider the profitability of the investment.

XG matrix:

Regards
Jan

Hi,

do you expect one suers to pull the 800mb/s or multiple users.

Try running two concurrent tests on different devices and see if you can achieve your desired throughput/

Ian

Hi Jan,

The Rev.3 for XG125 is it firmware or hardware revision? If just firmware, then it will be nice if we can "turn" our XG125 Rev.2 to Rev.3 with firmware update. 

In the meantime, will arrange to try your suggestion with XG135 and see how much extra we can get. 

Just for information, we are testing it on a single user environment by isolating the Sophos unit from our corporate network and tested using a direct standalone computer. 

Once the dust settled, we plan to plug in another 800mbps line since the XG box can configure multiple WAN port. Ya, won't be getting 1.6gbps line.. :D

Rgds,

KL

Hi Jan,

The Rev.3 for XG125 is it firmware or hardware revision? If just firmware, then it will be nice if we can "turn" our XG125 Rev.2 to Rev.3 with firmware update. 

In the meantime, will arrange to try your suggestion with XG135 and see how much extra we can get. 

Just for information, we are testing it on a single user environment by isolating the Sophos unit from our corporate network and tested using a direct standalone computer. 

Once the dust settled, we plan to plug in another 800mbps line since the XG box can configure multiple WAN port. Ya, won't be getting 1.6gbps line.. :D

Rgds,

KL

Hi KL,

As for XG, rev.2/3, there are versions of devices and equipment. The change from rev.2 to rev.3 is only possible by purchasing a new device. The current firmware is SFOS-17.5.7 MR7. Connecting 2 links 800 Mbps to XG is not a problem. They can operate in "failover" or "load balance" mode. Performance parameters given in the documentation are maximal values for one user. You need to select the XG125/135/210 device depending on the number of users and their requirements for the transmission band. You can rent devices at your local Sophos partner/distributor for testing.

Regards
Jan