Folks,
As far back as I could remember, my iOS devices since have performed incredibly intermittently and now it's cascading down to my Mac. Safari / Chrome will work for a few page requests followed by constant timeouts. Any LAN Host is incredibly fast; never an issue, never a timeout. I've used so many AP's and I'm always in the same boat; AP10, AP50, WRT-600N v1.1, Buffalo N600, Asus RT-AC3200 (current).
As comforting as it was to lock down the specific outbound ports each host on my network is allowed to access, it started to become a hassle and I longed for a more simple and stable performing solution. In the light for simplicity, I've created rules for each host (Host --> Any (Allow) --> Internet IPv4) followed by a catch all (Internal --> Any (Reject) --> Internet IPv4) for the stragglers. Unfortunately, this really hasn't changed much other than cleaner maintenance and potentially an easier transition if I wish to rebuild a brand new UTM from the ground up to avoid any previous configuration issues over the years.
Transparent Web Filtering, Application Control, and Dual Scan Antivirus are enabled. My iPhone Host is under the Source and Destination Transparent Skiplist, however, it hardly seems to make a difference. Web Caching is also off, as well. If more information is needed, let me know.
What seems to work on either the Mac or iOS, is renewing the DHCP Lease, however, I cannot express how irritating that becomes. Also, if it makes a difference, I'm using an OpenDNS Availability Group in the DNS Forwarders.
With regards to how ESXi is setup, both the UTM Master and Slave are using VMXNET3 Interfaces. The UTM's rely on 4 vSwitches: WAN, Internal, Insecure and VM Network (HA/Cluster) which correspond to the Cable Modem, Internal Switch, Insecure Switch and finally the VM Network which also resides on the Internal Switch for HA Syncing (I believe ESXi is smart here and Network Traffic doesn't actually occur, however, I'll have to double check that next time I reboot the UTM Slave). This setup makes Active/Passive incredibly simple, for what it's worth.
Cheers,
Kyle
This thread was automatically locked due to age.
Guest User!
You are not Sophos Staff.
