Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 27 subscribers
  • Views 3619 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Why is XG17 so much faster than UTM

MKR74

Hi,

I have just installed XG17 on a Zotac Zbox CI323 that was first installed with UTM 9. The Zotac Zbox CI323 has a quadcore celeron processer.

With dual AV, IPS, ATP and firewall activated the Zotac CI323 with UTM did get a maximum speed of around 140Mbps.

However, Xg17 installed on the same hardware and with the same options activated in XG17, I get a download speed of over 220Mbps.

 

Is the XG17 OS really much faster? Or is it a bad configuration?

 



This thread was automatically locked due to age.
Parents
  • 0

    XG has always been faster than UTM. It was missing so many features that most of us refused to use it before. https://news.sophos.com/en-us/2015/12/10/sophos-xg-firewall-innovations-fastpath-packet-optimization/ 

    With v17, I am happily using XG but if I have to publish exchange smtp or WAF, UTM is still better. UTM was never that great with webfiltering speed, however if you are not using webfiltering, you shouldn't see the differences you are seeing in your testing. With most download tests, you are probably bypassing av scanning due to the size limitations of av scan. ATP only affects DNS queries so has no affect on speed test. This brings us to IPS... this is probably where you are seeing the difference with XG spawning more snort instances than UTM by default. 

    Hope this helps.

Reply
  • 0

    XG has always been faster than UTM. It was missing so many features that most of us refused to use it before. https://news.sophos.com/en-us/2015/12/10/sophos-xg-firewall-innovations-fastpath-packet-optimization/ 

    With v17, I am happily using XG but if I have to publish exchange smtp or WAF, UTM is still better. UTM was never that great with webfiltering speed, however if you are not using webfiltering, you shouldn't see the differences you are seeing in your testing. With most download tests, you are probably bypassing av scanning due to the size limitations of av scan. ATP only affects DNS queries so has no affect on speed test. This brings us to IPS... this is probably where you are seeing the difference with XG spawning more snort instances than UTM by default. 

    Hope this helps.

Children
No Data