Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 2 subscribers
  • Views 5327 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos UTM causes network pkt loss

StevenS92
UTM Conifg:
NIC1 (Gateway): Broadcom Corporation NetXtreme BCM5761 Gigabit Ethernet PCIe
NIC2 (Internal): Intel Corporation 82541PI Gigabit Ethernet Controller
CPU: W3565  @ 3.20GHz
Mem: 2*6 ECC
Firmware version:  9.313-3  (Home license)

Set up:
ExternalExternal Shaw SwitchUTM FirewallDLINK Dir655 (DHCP disabled, Firewall connected to port 1, rest of the computers connected to port 2-4. WAN port unused)

Gateway internal IP: 10.0.0.1

By using WinMTR from an internal computer:

|------------------------------------------------------------------------------------------|
|                                      WinMTR statistics                                   |
|                       Host              -   %  | Sent | Recv | Best | Avrg | Wrst | Last |
|------------------------------------------------|------|------|------|------|------|------|
|                                10.0.0.1 -   10 |  825 |  750 |    0 |    0 |    1 |    0 |
|                   No response from host -  100 |  150 |    0 |    0 |    0 |    0 |    0 |
|                                         -    1 | 1468 | 1465 |    6 |   10 |   50 |    9 |
|                                         -    1 | 1477 | 1475 |   28 |   33 |   53 |   34 |
|                   No response from host -  100 |  150 |    0 |    0 |    0 |    0 |    0 |
|                                         -    1 | 1485 | 1484 |   67 |   87 |  276 |   69 |
|                                         -    1 | 1467 | 1464 |   68 |  100 |  364 |  105 |
|                                         -   91 |  164 |   15 |   69 |   97 |  284 |   70 |
|                                         -    1 | 1476 | 1474 |   84 |  101 |  461 |  123 |
|                         bhs-g1-a9.qc.ca -    1 | 1468 | 1465 |   83 |   87 |  116 |   86 |
|                  vac3-0-a9.qc.ca.vaccum -    9 |  809 |  737 |   86 |  424 |  608 |   87 |
|                vac3-1-n7.qc.ca.firewall -   38 |  345 |  217 |    0 |   87 |  100 |   96 |
|                         vac3-2-n7.qc.ca -    1 | 1443 | 1437 |   84 |   87 |  107 |   87 |
|                         vac3-3-n7.qc.ca -   40 |  327 |  197 |    0 |   87 |   94 |   87 |
|                   No response from host -  100 |  150 |    0 |    0 |    0 |    0 |    0 |
|                                         -    1 | 1468 | 1465 |   83 |   87 |  107 |   85 |
|________________________________________________|______|______|______|______|______|______|
   WinMTR v0.92 GPL V2 by Appnor MSP - Fully Managed Hosting & Cloud Provider


WinMTR from an outside computer to firewall external IP:

|------------------------------------------------------------------------------------------|
|                                      WinMTR statistics                                   |
|                       Host              -   %  | Sent | Recv | Best | Avrg | Wrst | Last |
|------------------------------------------------|------|------|------|------|------|------|
|                                         -    0 | 1117 | 1117 |    0 |    0 |   37 |    1 |
|                   No response from host -  100 |  223 |    0 |    0 |    0 |    0 |    0 |
|                   No response from host -  100 |  223 |    0 |    0 |    0 |    0 |    0 |
|                   No response from host -  100 |  223 |    0 |    0 |    0 |    0 |    0 |
|          rt1ec-equinix.il.shawcable.NET -    0 | 1117 | 1117 |   17 |   18 |   22 |   18 |
|                                         -    0 | 1117 | 1117 |   33 |   33 |   34 |   33 |
|                                         -    0 | 1117 | 1117 |   78 |   78 |   80 |   79 |
|                                         -    0 | 1117 | 1117 |   79 |   79 |   83 |   80 |
|                                         -    1 | 1110 | 1108 |   83 |   87 |  105 |   88 |
|________________________________________________|______|______|______|______|______|______|
   WinMTR v0.92 GPL V2 by Appnor MSP - Fully Managed Hosting & Cloud Provider


WinMTR from internal computer directly to gateway:

|------------------------------------------------------------------------------------------|
|                                      WinMTR statistics                                   |
|                       Host              -   %  | Sent | Recv | Best | Avrg | Wrst | Last |
|------------------------------------------------|------|------|------|------|------|------|
|                                10.0.0.1 -    0 |  821 |  821 |    0 |    0 |    1 |    0 |
|________________________________________________|______|______|______|______|______|______|
   WinMTR v0.92 GPL V2 by Appnor MSP - Fully Managed Hosting & Cloud Provider


Packet loss in TeamSpeak(UDP) is about 0%-1.5%, without firewall it stays @ 0.00%.

Any solution for packet this packet loss issue?


This thread was automatically locked due to age.
  • 0
    get rid of the dlink first of all and use a real switch.  What modules do you have enabled on the utm?  Also the intel nic could be the culprit either change to a broadcom or an intel 210 based nic.
  • 0 in reply to William Warren
    get rid of the dlink first of all and use a real switch.  What modules do you have enabled on the utm?  Also the intel nic could be the culprit either change to a broadcom or an intel 210 based nic.


    That's my plan as well. I just bought a 2nd hand DGS-1008T network switch, hopefully that's good. Installing it later since I am not at home now.

    The network wasn't under heavy load, so I don't really expect any of the NIC overloaded and dropping pkts.

    Enabled Modules:
    DHCP
    QoS (Just max bandwidth, all others are blank or disabled)
    Firewall (Allow all outgoing, reject all incoming), IPS, Anti-Port scanning, Advanced Treat Protection
    Web Filter (Transparent, Anti-virus disabled)

    Disabled Modules:
    IPv6
    Anti-Virus, Spyware
    VPN, Proxy, FTP
    Server load balancing
    VoIP
    Email protection
    Endpoint protection
    Web Protection
    WiFi Protection
    RED Management
    Remote Access
  • 0
    The nic issue is a Intel driver bug.  Switch nics...[:)]
  • 0 in reply to William Warren
    The nic issue is a Intel driver bug.  Switch nics...[:)]


    I thought those could be fix by driver update?

    Anyways, let me hook up the switch tonight and see what happens first. Thanks.
  • 0
    Only if Intel is interested in fixing it....and they aren't