topic Re: importing database slow connection MTU ? in Firewall and Security Management

importing database slow connection MTU ?

marcinw — Wed, 08 Sep 2021 12:16:49 GMT

Hi Guys

I have issue with traffic between Remote Access user and one of the server. The connection looks ok when I try download / upload single files, however it becomes really slow when users is trying import data from excell spreadsheet to program that is installed on this server. This program takes data from the spreadsheet and puts it into SQL database. Traffic is not being inspected by IPS , threat emulation etc . There is no problem with internal traffic between host and server, only Remote traffic . I started wondering if it has something to do with MTU and fragmentation? On the outside interface we have MTU 1500 I believe RA virtual interface is 1320 .

What do you think ?

p.s just checked ping from remote laptop to the server and ping is working at 1322

thanks

Marcin

Re: importing database slow connection MTU ?

the_rock — Wed, 08 Sep 2021 13:01:16 GMT

I would definitely be careful when it comes to changing MTU, specially on external interface. as that can affect everyone. Is it just one user and that one server, or issue with multiple users? Just to be 100% positive, are you able to turn off securexl for a moment and test to see if it makes any difference?

See, with MTU size, what will happen is, if you lower the size of it, yes, packets will be smaller, but there will be way more of them and if you increase it, packets will be larger size, but lesser number of packets, so technically, that may result in more efficient transmission.

Re: importing database slow connection MTU ?

Chris_Atkinson — Wed, 08 Sep 2021 13:15:03 GMT

What encryption settings are used: AES-NI friendly i.e. not 3DES etc?

Re: importing database slow connection MTU ?

marcinw — Wed, 08 Sep 2021 13:26:41 GMT

hi ,

at this moment I can't disable securexl, however will take it into consideration for sure, thanks

Re: importing database slow connection MTU ?

marcinw — Wed, 08 Sep 2021 13:27:02 GMT

encryption ESP: AES-256 + SHA1

Re: importing database slow connection MTU ?

the_rock — Wed, 08 Sep 2021 13:28:41 GMT

Understood.

Re: importing database slow connection MTU ?

PhoneBoy — Mon, 13 Sep 2021 02:05:56 GMT

That sounds like fragmentation issues alright.
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98074