Guest User!

You are not Sophos Staff.

Thread Info
  • Locked Locked
  • Replies 9 replies
  • Subscribers 1 subscriber
  • Views 24332 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

9.351-3 seems to have broken Site2Site

Ben

after upgrading both my home and my test site to 9.351-3 inbound traffic only gets as fast as 100kb/sec or the connection drops out alot.



This thread was automatically locked due to age.
Parents
  • Hi Ben,

    there weren't any changes in 9.351 to VPN or to QoS, other than a couple cosmetic fixes. It seems unlikely the firmware is directly responsible. Next steps should probably be some networking level troubleshooting.

    Are there any speed issues when connecting to the internet?
    If you send small ping packets over the tunnel, is the response time what you expect?
    If you send large (~1000-1300 byte) ping packets over the tunnel, does the latency increase more than you would expect?

    If you repeat the tests over the tunnel between the firewall public IPs, do you see the same results?
    Do you see anything interesting in a packet capture of the encrypted packets, such as excessive fragmentation, retransmission requests or errors?

    That's at least a starting point for troubleshooting. Also, depending on what type of vpn you're using,. you might try switching to a different technology and see if the problem changes in any way. So if you're using IPsec, try a red or ssl vpn, and vice versa.
Reply
  • Hi Ben,

    there weren't any changes in 9.351 to VPN or to QoS, other than a couple cosmetic fixes. It seems unlikely the firmware is directly responsible. Next steps should probably be some networking level troubleshooting.

    Are there any speed issues when connecting to the internet?
    If you send small ping packets over the tunnel, is the response time what you expect?
    If you send large (~1000-1300 byte) ping packets over the tunnel, does the latency increase more than you would expect?

    If you repeat the tests over the tunnel between the firewall public IPs, do you see the same results?
    Do you see anything interesting in a packet capture of the encrypted packets, such as excessive fragmentation, retransmission requests or errors?

    That's at least a starting point for troubleshooting. Also, depending on what type of vpn you're using,. you might try switching to a different technology and see if the problem changes in any way. So if you're using IPsec, try a red or ssl vpn, and vice versa.
Children