This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Slow Internet Speed

Hi Guys,

I've got Astaro ASG320 appliance that we use in our company with approximately 100 users usingASG V8.
We have got a TID connection 10M/10M.
We have been experiencing slow internet speeds for all web & remote desktop traffic for quite some time. Some websites don't even load up completely & time out. The reason that I am confident its Astaro causing this problem is because of two reasons:
1. When I plug in a laptop directly into my router and access the web (bypassing astaro), I have got no issues, but as soon as i plug that laptop into my network those websites start to time out or don't load up properly. I have also tried testing it over the weekend and also with just the laptop plugged into the switch that connects to Astaro to eliminate and network congestion issues, but I got the same results.
2. On the same internet link, I have got a second network for our other business that doesn't use Astaro (have got a different firewall) and there seems to by no issues with any website access or speed issues from that network.

Users on the first network have been complaining a lot about speed and time out issues. I have tried disabling the HTTP/S filtering but it didn't help.
I have tried using proxy setting but that didn't work either.
I tried disabling all filtering rules, but still slow speeds. Added websites to exceptions, disabled scanning of the websites for Antivirus/Malware, etc etc etc but nothing seems to work.

I also got our support guys to enable caching and also got them to enable the pre-release of "local content filter" so that the database resides on our appliance hoping to make the web quicker... But nothing worked.

Any bright ideas on what else to do? I'm out of options and users are running out of patience [:S]

This thread was automatically locked due to age.

Parents

0 William Warren over 14 years ago

Since a common thread here is http timeouts. turn off the http proxy totally. Also disable your ips for the time being. If that solves the issue then either the http proxy is having issues or the ips is eating your packets. Check and make sure your dns setup is correct. If anyone is using AD internally there is a dns routing section that must be done correctly or you will have these kinds of issues.. Report back here with your results.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel
0 Japi.Hansi over 14 years ago in reply to William Warren

Since a common thread here is http timeouts. turn off the http proxy totally. Also disable your ips for the time being. If that solves the issue then either the http proxy is having issues or the ips is eating your packets. Check and make sure your dns setup is correct. If anyone is using AD internally there is a dns routing section that must be done correctly or you will have these kinds of issues.. Report back here with your results.

I had tried turning off the HTTP proxy before as well but it didn't improve the speeds at all... However, as per your suggestion I had disabled IPS and what do you know, browsing became a lot smoother and quicker. No timeouts or slow speeds on the sites that we used to experience the slowness on.

In addition I also tried just for fun trying to ping our branch office in China and I got 10ms response. When enabled IPS it jumped up to 151ms. So it is the IPS that is causing us all this grief...

Could there be something that is misconfigured in IPS? I don't want to turn it off if possible.
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 14 years ago in reply to Japi.Hansi

I had tried turning off the HTTP proxy before as well but it didn't improve the speeds at all... However, as per your suggestion I had disabled IPS and what do you know, browsing became a lot smoother and quicker. No timeouts or slow speeds on the sites that we used to experience the slowness on.

In addition I also tried just for fun trying to ping our branch office in China and I got 10ms response. When enabled IPS it jumped up to 151ms. So it is the IPS that is causing us all this grief...

Could there be something that is misconfigured in IPS? I don't want to turn it off if possible.

IPS is hugely cpu intensive/memory/mobo intensive. if youa re seeing that big of a hit with the ips on you may need to upgrade to another system. I would turn o the ips and fire up the ips live log. it sounds like the ips is eating your traffic.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 William Warren over 14 years ago in reply to Japi.Hansi

I had tried turning off the HTTP proxy before as well but it didn't improve the speeds at all... However, as per your suggestion I had disabled IPS and what do you know, browsing became a lot smoother and quicker. No timeouts or slow speeds on the sites that we used to experience the slowness on.

In addition I also tried just for fun trying to ping our branch office in China and I got 10ms response. When enabled IPS it jumped up to 151ms. So it is the IPS that is causing us all this grief...

Could there be something that is misconfigured in IPS? I don't want to turn it off if possible.

IPS is hugely cpu intensive/memory/mobo intensive. if youa re seeing that big of a hit with the ips on you may need to upgrade to another system. I would turn o the ips and fire up the ips live log. it sounds like the ips is eating your traffic.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data