Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 18 replies
  • Subscribers 4 subscribers
  • Views 103928 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos UTM with VMware View PCOIP

xp3000
Hi,

We're using sophos utm firewalls with our VMware View infrastructure using PCOIP UDP 4172.

However when we use PCOIP we're receiving network loss and delays, when we bypass the sophos utm it's completely fine! We've enabled QoS for PCoIP in the utm but this makes no difference.

What else would be causing the utm to add packet loss to PCOIP?


This thread was automatically locked due to age.
Parents
  • 0
    Did you check the IPS log for Anti-UDP Flooding activity?

    Cheers - Bob

    Sorry for any short responses.  Posted from my iPhone.
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Yes, as i noted the IPS was disabled as well as all the DoS flooding turned off.  The logs show nothing as literally every single service that could be disabled was.
  • 0 in reply to tmbm50
    Did you find a solution? I have the same problem
  • 0 in reply to chrigu82

    Had same problem, very slow PCoIP connection. Log shows:
    2016:11:24-09:29:35 sgxx-2 ulogd[20489]: id="2105" severity="info" sys="SecureNet" sub="ips" name="UDP flood detected" action="UDP flood" fwrule="60013" initf="eth0" srcmac="00:50:56:xx:xx:xx" dstmac="00:1a:8c:xx:xx:xx" srcip="192.168.xx.xx" dstip="10.168.xx.xx" proto="17" length="96" tos="0x00" prec="0x00" ttl="128" srcport="4172" dstport="50002"

    Had disabled udp-flood-protection at the moment. Problem gone, so as a quick workarround.

    Best regards

    Alex

    -

Reply
  • 0 in reply to chrigu82

    Had same problem, very slow PCoIP connection. Log shows:
    2016:11:24-09:29:35 sgxx-2 ulogd[20489]: id="2105" severity="info" sys="SecureNet" sub="ips" name="UDP flood detected" action="UDP flood" fwrule="60013" initf="eth0" srcmac="00:50:56:xx:xx:xx" dstmac="00:1a:8c:xx:xx:xx" srcip="192.168.xx.xx" dstip="10.168.xx.xx" proto="17" length="96" tos="0x00" prec="0x00" ttl="128" srcport="4172" dstport="50002"

    Had disabled udp-flood-protection at the moment. Problem gone, so as a quick workarround.

    Best regards

    Alex

    -

Children
  • 0 in reply to Alexander Busch

    Same issue here.  Also resolved by disabling UDP flood protection on that link.

    -------------------------------

    Interesting [in-ter-uh-sting, -truh-sting, -tuh-res-ting]

    A word typically used by IT technicians to describe an issue they didn't expect, or never encountered, and don't know how to fix.

Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?

Unfiltered HTML