I was consistently pulling down 100Mbits with my UTM 9.35 until last week. I can't say for sure if it was a pattern update or a firmware update, but I noticed that my speed tests were topping out at about 45Mbit down. I started poking around my cable modem and noticed nothing odd, so I bypassed my UTM and did a speed test. I got my usual 100Mbit, which made me look a bit silly to the cable tech on the other end of the phone.
I started my usual troubleshooting round of turning off UTM functions: Web Protection; no improvement. IPS: thar she blows! I further narrowed the problem down to a specific function that I had enabled probably 6 months ago: checkbox for "Activate file related patterns". I read up on this feature when I first enabled it, and I DO realize that it comes with a performance hit, BUT I have not seen that performance hit on my UTM hardware with my internet service level until a week ago, which leads me to believe it was a recent IPS pattern update that likely was the culprit.
I have disabled "Network Protection" > "Intrusion Prevention" > "Advanced" > "Activate file related patterns" for now and I am back up to full speed. I have reviewed the IPS log, but I must confess that it is quite verbose and I don't know what I'm looking for...
If you are missing some download speed recently, you might check to see if you have this feature enabled also and disable it until the issue is more thoroughly understood. I am a home user so I don't have the ability to open a case with Sophos, but if any other supported users out there are seeing this same behavior with this IPS file pattern option, please report it.
This thread was automatically locked due to age.
