Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 10 replies
  • Subscribers 6 subscribers
  • Views 1339 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SG-135 Bandwidth Issues

Rneal1973

I work for a small credit union and one of our branches has terrible throughput out to the internet.

Or more specifically, upload speeds. Down is fine, up is abysmal.

In our configuration we have Comcast internet coming into a 5 port hub, which then connects to two (2) Sophos SG-135s setup in an HA configuration.

So from Comcast, we connect to the WAN interface on each FW, then connect the LAN interface to a Dell PowerConnect 3448 switch, then to PCs, Printers, etc.

We also have a Barracuda Web Filter 310 that acts as the default gateway for LAN connected devices.

Our DC acts as the DHCP server and supplies the IP and default gateway (the Barracuda's IP) to connected devices.

We also have a PTP T1 connecting this branch to our main location.

FWIW, I inherited this configuration and am trying to unwind it.

And so for some additional context, I can't manage the FW (Maybe I could, I'm just not currently).

My predecessor was terminated, and I've had to cobble a lot of the environment together on my own.

I have to go to a well known fintech to manage the FWs, but I digress...

So my issue is, whenever doing a speed test, bandwidth down is reasonable -- ~90Mbps, but up barely pushes 1.5Mpbs.

Coincidentally, that's also the speed of a T1.

Is it conceivable the traffic out is being redirected across the T1?

I've done all kinds of troubleshooting to narrow down the issue (e.g. connect directly to the modem, rule out wiring, bad switches, bad devices, etc.).

There is no other answer, the FW is absolutely the culprit. I just want to be armed with suggestions for our fintech.

Thank you,

Rob



This thread was automatically locked due to age.
Parents
  • 0

    Hi Rob and welcome to the UTM Community!

    There's still too much unknown - what speeds do you get if you copy-n-paste the following block of commands to the command line?

    cd /home
    wget raw.githubusercontent.com/sivel/speedtest-cli/master/speedtest.py --no-check-certificate
    cc set ips status 0
    sleep 15s
    python speedtest.py
    cc set ips status 1
    sleep 30s
    python speedtest.py

    Also, how are you measuring up/down speeds?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0

    Hi Rob and welcome to the UTM Community!

    There's still too much unknown - what speeds do you get if you copy-n-paste the following block of commands to the command line?

    cd /home
    wget raw.githubusercontent.com/sivel/speedtest-cli/master/speedtest.py --no-check-certificate
    cc set ips status 0
    sleep 15s
    python speedtest.py
    cc set ips status 1
    sleep 30s
    python speedtest.py

    Also, how are you measuring up/down speeds?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • 0 in reply to BAlfson

    Unfortunately, I don't have access to the FWs themselves. Our 3rd party manages them.

    Measuring speeds by going out to like speedtest.net

    However --

    Got the FW engineer on the phone this morning and we isolated the issue to ETH0 dropping frames.

    Swapped to another ethernet port on the FW and we're cooking with gas! 

    Prior to the swap we'd consistently see values like 70/1.5, after the swap 90/17

    We're paying for 100/15

    So now that we've resolved that issue, I can focus on simplifying the environment.

    Thanks!

    Rob

Unfiltered HTML