Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 5 subscribers
  • Views 2798 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Slow SSL VPN Connection - 1 User

TitanRob16

Hi all,

One of our users seems to have an incredibly slow connection whilst working remotely in Germany (he's connecting into UK servers via the SSL VPN connection). We've given him a new certificate, run 'netsh winsock reset' on his system, and have checked the routing, etc., but all seems to be in order. Most odd of all: he's the only one with these issues; everyone else is working perfectly fine over the SSL VPN. 

We ran a WireShark trace on his system and can see a lot of TCP Retransmission logs when he's trying to connect to an internal webpage. His Internet speed is also fine. Are there any other tests we can do, short of re-imaging his system in the hopes that it resolves the issue? 

Any help with this would be greatly appreciated. 



This thread was automatically locked due to age.
  • 0

    Hey Titan.

    You could try lowering the MTU on the WAN interface and changing the SSL VPN to use UDP protocol instead of TCP. Bear in mind that changing the protocol (or any settings for that matter) for the SSL VPN would require all clientes to redownload the configuration for the SSL VPN client.

    Regards,

    Giovani

  • 0 in reply to giomoda

    MTU does not typically impact SSL VPN like it does IPSEC, but TCP will definitely incur a performance penalty.

  • 0 in reply to giomoda

    Hmm, that's the thing: because it's only effecting one user, it seems more like an issue on their side. Everyone else is working perfectly fine, so I don't really see a need to change the MTU on the WAN interface (or doing anything on the UTM, for that matter). 

    We've redownloaded the configuration and have even reinstalled OpenVPN to no avail. Is there perhaps anything else I could check on his side that would be causing this? 

    Again, there are no issues with his Internet or ISP as far as I can see. 

Unfiltered HTML