![]() Full DPI/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.ģ. Testing done with multiple flows through multiple port pairs. Threat Prevention/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. In an update, i ordered a nsa2600 from ebay for $200 and will test that when it arrives and updateġ. So the problem is with the tz, not the nsa side of things, i did change the tz to performance optimized, it made a very small difference, about 2mb/s more. I am downloading a file from the colo from an internal server to the tz400 and it maxes out at about 48/mb due to the processor, tech support saidĭownloading the same file from my laptop with gvc at home (100/100) yields about 90mb/s Let me clarify b/c you're missing something. You will probably get around 18Mbps tops when you pull something from the TZ400. GOing from the TZ400 to HQ is going to be slower than the other way due to the upload being 25Mbps on that side of the house. This will only go across the VPN instead of hitting your internet connection. The settings SonicWALL posted are more theoretical if you have the perfect scenario setup.įrom HQ to the TZ400 you can test out the LAN speed to see your bandwidth. If you need to use the internet, it goes out of your home internet pipe.Īs stated above, VPNs are always going to be slower because they are more secure and require a lot more overhead than regular traffic. The default on SonicWALLs is to split tunnel your traffic - you have access on the other side of the GVC to what you need likes shares and resources. Nick8010 the way I read and interpreted this is when you connect from home to the NSA or TZ400 using the GVC, you can download a file at 100Mbps. im going to try and get a demo nsa2650 or 2600 from sales and re-test all of this. it seems their published speeds are not indicative of real world. the tech was trying to explain this to me last night and it just didnt make alot of sense however i see many others talking about the same thing. from reading alot of other posts, it seems the tz400 is capped at 50mb due to the cores and how things are handled. ![]() When testing with gvc, all security services on the nsa were on with no changes, and i got the full 100mb download so the problem is on the tz400 side it seems like. we did disable security in the vpn zone as a test nsa was not, tz400 was though, no change.ģ. ikev2, however we did go basic md5 on the vpn, no difference in speedĢ. When you did your test using the global vpn client, was everything else the same, i.e. I assume you recognize that you're not going to get more than 25Mbps transfer from the TZ400 site to the NSA site, so I'll focus on the other direction.ġ) What mode and/or encryption is your VPN set to? (main, aggressive, ikev1, ikev2, aes-128, aes-256) and did you try switching any of it?Ģ) Are both firewalls in "performance optimized" mode?ģ) Have you checked to make sure security services are not enabled in the VPN zone? This seems like a good lead, as using the global vpn client would bypass this. An awful lot of things could be affecting this.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |