Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 5 subscribers
  • Views 4233 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

What is the best way to set up a UTM to UTM tunnel?

Russ McGinley

We've recently purchased a SG115 for a site that has 100/100 fiber connection, and we have a SG320, on a 100/100 link, at our corporate office.  Previously we were using a RED15 at this location and had a tunnel set up to the corporate SG320 and we were seeing 70-80Mbps throughput, according to speedtest.net.  After setting up the SG115 and configuring it as a UTM to UTM tunnel (according to https://community.sophos.com/kb/en-us/120157), we are only seeing 15-20Mbps throughput on the VPN.  All internet traffic speed tests at 100Mbps, as it goes out through the local ISP.  I've opened a ticket with Sophos, and the tech told me that the speeds were "acceptable".  I have tested without IPS running, and have put exclusions for all scanning between sites.  The speeds are from running iperf3 on servers in each location.  

 

Is setting the tunnel up as a SSL vpn better than the RED UTM tunnel?  The tech that I spoke with didn't seem to have a clue.  He kept telling me that I set up the tunnel wrong, but it's working, other than the speed issue.



This thread was automatically locked due to age.
  • 0

    Try to set up a real ipsec vpn tunnel.. not a ssl one.

    Then do your tests again and compare if ts better or not

  • 0

    I finally received some good information from the tech, which indicated that file transfer/download speed is not indicative of surfing speed, and he gave examples.  So, I compared the numbers that I was seeing to numbers that I got when I ran the iPerf commands from good sources (100Mbit hard line, 15Mbit cell connection) and the numbers were comparable (still a little slower, but better now that I have numbers to compare to).  What I was comparing to was speedtest.net, and now I realize that it's not a valid comparison.