This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM@Home Network Performance

Hi

I'm running a UTM installation on a HP microserver at home to protect the network and ensure the kids don't go places they shouldn't.

The problem I have is the impact the UTM is having on network throughput and pings.

I'm running 9.104. The dashboard says the CPU is

This thread was automatically locked due to age.

0 gfreiler over 12 years ago

Hi KHolohan,

are you use IPS?

Gerald
Cancel
Vote Up 0 Vote Down

Cancel
0 KHolohan over 12 years ago in reply to gfreiler

Hi Gerald

Yes, IPS is enabled.

Since I last re-booted the UTM 2 weeks ago, the dashboard says 324 attacks have been blocked.

Thanks

Kevin
Cancel
Vote Up 0 Vote Down

Cancel
0 gfreiler over 12 years ago

Hi,

did you configure IPS? Check off those services you do not use in your LAN.
Test ICMP and Speed again.
Cancel
Vote Up 0 Vote Down

Cancel
0 KHolohan over 12 years ago

Turning off IPS doesn't make any difference to the pings but the download speed increases from 33.7 to 69Mbps which is the max my broadband network will support. Upload speed is unaffected.
Cancel
Vote Up 0 Vote Down

Cancel
0 gfreiler over 12 years ago

OK. next option: do you have Application Controll enabled?
Cancel
Vote Up 0 Vote Down

Cancel
0 KHolohan over 12 years ago in reply to gfreiler

No - no application control.

I'm just using the UTM as a firewall and for content filtering.
Cancel
Vote Up 0 Vote Down

Cancel
0 gfreiler over 12 years ago

How did you try the ping?
From UTM directly?
From a client behind the UTM?
From a client connection directly to the ISP router/modem?
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 12 years ago

if you are using the low end microserver yes you are asking too much with http proxy, content filtering, a/v and ips.
Cancel
Vote Up 0 Vote Down

Cancel
0 KHolohan over 12 years ago in reply to gfreiler

Network is Fibre Modem -> Router -> UTM -> Switch for home network.

I realise the router in my network is not needed as the UTM could connect directly to the modem but connecting to the spare ports on this router gives me the 10ms pings. connecting to the switch downstream of the UTM gives me the longer pings.
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 12 years ago in reply to KHolohan

Network is Fibre Modem -> Router -> UTM -> Switch for home network.

I realise the router in my network is not needed as the UTM could connect directly to the modem but connecting to the spare ports on this router gives me the 10ms pings. connecting to the switch downstream of the UTM gives me the longer pings.

that's because you are bypassing the utm when you plug into the router.

Ping on http based pings test are not accurate due to the delay added by the http scanning. if you run a tracert to etc-md.com from a pc behind your utm you'll see your internal pings transiting the utm aren't affected unless the cpu is relaly under a high load.
Cancel
Vote Up 0 Vote Down

Cancel