This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Enabling Anti-DoS/Flooding slows download speed by over 300 Mbps. Does that seem right?

The network in question was getting DDoS attacks almost daily so IPS was enabled and configured which stopped the attacks. In the Anti-DoS/Flooding tab TCP SYN Flood Protection, UDP Flood Protection, and ICMP Flood Protection have all been applied. Since then the download speed went from about 450+ Mbps to 110 Mbps or lower.

Another network, configured similarly, also has IPS enabled but doesn't have TCP SYN Flood Protection, UDP Flood Protection, and ICMP Flood Protection turned on. And that network is receiving full download speed.

Would enabling the Anti-DoS/Flooding features effect the download speed that severely? Or are there any other features that I should be checking out?

Thanks

This thread was automatically locked due to age.

0 Jas Man over 8 years ago

Hi Paul,

IPS in general slows down the speed because it inspects every packet. I had the same problem, see here

https://community.sophos.com/products/unified-threat-management/f/network-protection-firewall-nat-qos-ips/80027/ips-slows-down-my-internet-connection-since-some-days

Jas Man
Cancel
Vote Up 0 Vote Down

Cancel
0 Paul Dionise over 8 years ago in reply to Jas Man

Hi Jas Man,

Thanks for the link. I'll check it out
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 8 years ago

Hi, Paul, and welcome to the UTM Community!

As Jas Man says, this type of slowness is normally associated with Snort, not Anti-DoS Flooding. What do you learn when you do #1 in Rulz?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Enabling Anti-DoS/Flooding slows download speed by over 300 Mbps. Does that seem right?

Submitted a Tech Support Case lately from the Support Portal?