Slow file transfer speeds

Hi Matt,

Start with doing #1 in Rulz - does that give any insight? (I don't expect it to, but we should cover the basics.)

Please insert pics of the IPsec Connection and Remote Gateway definitions open in Edit for both locations.

Cheers - Bob

Hi, Bob.

I have turned off IPS, as well as adding exceptions to IPSEC service (IPSec, IKE, NAT-T).  There was no change in speed.

Here are screen shots of the info you requested.

UTM120 (remote site)

SG230 (head office)

I was asking both locations ISP for the MTU, and one CS was helpful enough to suggest the following:

fragmentation in IPSEC and changing the mss has had positive results.

 http://www.cisco.com/c/en/us/support/docs/ip/generic-routing-encapsulation-gre/25885-pmtud-ipfrag.html

1. Enable Shell access to the UTM
2. Login via SSH 
3. Issue the following commands
   
   iptables -t filter -I FORWARD 1 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1440
   
   echo "iptables -t filter -I FORWARD 1 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1440" > /var/mdw/hooks/packetfilter_advanced
   
   chmod 400 /var/mdw/hooks/packetfilter_advanced

I have not done the above, as I am not comfortable making shell changes without knowing how to revert back.

Thanks.

Matt

Matt, please re-read #1.  I don't think disabling IPS makes any difference in these situations.  What's in the logs?

Cheers - Bob

this can be closed.  There was a cisco 2950 infront of the UTM that was causing the slow speed.

this can be closed.  There was a cisco 2950 infront of the UTM that was causing the slow speed.

Thanks for letting us know, Matt.

Ya know, when I think of a cheap switch in front of the WAN port, it's a 4-port HP. [;)]

Cheers - Bob