Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 16 replies
  • Subscribers 2 subscribers
  • Views 34212 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL vpn 10mb

avaserman@craigross.com
Hello Everybody,
I experiencing some issue with SSL VPN
I have in office 100mb up/down and in my home 25mb.
When I open connection via SLL VPN Utm 220 I get maximum 10Mb , and nic from Sophos ssl shows 10 MB as well.When I open the PPTP or L2TP i get maximum speed 25mb what provided give me .
I just wondering if that some bug  or only me experiencing that issue with connection limit?


This thread was automatically locked due to age.
Parents
  • 0
    Hi,

    we also had the issue with slow SSL-VPN for Remote Access although we have a 100/12Mbit/s at the office and a synchronous 1Gbit/s at the datacenter. It turned out that the UDP Flood Protection throttled the connection.

    We have created an IPS->Exception for UDP Flood Protection (disabled) for all UDP connections on that specific SSL-VPN Port and Interface/IP we use for it and now we get the full 100Mbit/s to the datacenter for downloads and about 6-7Mbit/s upstream to the datacenter where both was limited to 2Mbit/s before (with UDP Flood enabled for everything).

    Hope it helps!
  • 0 in reply to guawhitehawk

    We have the same exact problem with a SG230, the SSL VPN seems limitted to 10Mbps even though we have 300/100Mbps in the remote site where the firewall is and 100/10 in the office.

    The current configuration is UDP, no compression, SHA2 256, Key size 2048 bit, AES-256-CBC. We have tried TCP and other combinations with the algorithms with no luck. IPS and flood protections are disabled.

  • 0 in reply to JonFranco

    Jon, what result do you get withSHA1, 1024 and AES-128-CBC?  Watch the Intrusion Prevention Live Log when you try.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0 in reply to JonFranco

    Jon, what result do you get withSHA1, 1024 and AES-128-CBC?  Watch the Intrusion Prevention Live Log when you try.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
Unfiltered HTML