https://community.checkpoint.com/t5/Firewall-and-Security-Management/throughput-of-site2site-VPN/m-p/136981#M20729 <P>Thank you for answering!</P> Wed, 22 Dec 2021 12:59:07 GMT Kleber_Nunes 2021-12-22T12:59:07Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/throughput-of-site2site-VPN/m-p/136942#M20721 <P>Hello friends!</P><P>I created a VPC connection with AWS to transfer some applications, but I noticed that transfer rate speed have been too slow, it's taking hours to transfer 1GB of data, hope you guys can help me. I have a Checkpoint 13500 running R80.40 take 119.</P> Tue, 21 Dec 2021 23:06:20 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/throughput-of-site2site-VPN/m-p/136942#M20721 Kleber_Nunes 2021-12-21T23:06:20Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/throughput-of-site2site-VPN/m-p/136961#M20725 <P><A class="cp_link sc_ellipsis" href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk105119&amp;partition=Basic&amp;product=IPSec" target="_blank">sk105119: Best Practices - <STRONG>VPN</STRONG> <STRONG>Performance</STRONG></A></P> Wed, 22 Dec 2021 08:25:24 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/throughput-of-site2site-VPN/m-p/136961#M20725 G_W_Albrecht 2021-12-22T08:25:24Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/throughput-of-site2site-VPN/m-p/136981#M20729 <P>Thank you for answering!</P> Wed, 22 Dec 2021 12:59:07 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/throughput-of-site2site-VPN/m-p/136981#M20729 Kleber_Nunes 2021-12-22T12:59:07Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/throughput-of-site2site-VPN/m-p/136990#M20731 <P>While it is certainly possible that your firewall is the bottleneck and some tuning as described in sk105119 posted by Gunter will help, dramatically bad performance through a VPN is likely to be an IP MTU/Fragmentation issue, see here:&nbsp;<A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk98074&amp;partition=Advanced&amp;product=IPSec" target="_blank" rel="noopener">sk98074: MTU and&nbsp;Fragmentation&nbsp;Issues in&nbsp;IPsec&nbsp;VPN</A>.&nbsp; Easy way to test if this is indeed the cause is to measure file transfer performance between the same two systems over the same network path, but NOT inside a IPSec tunnel (SCP/FTP/HTTPS/HTTP is fine for this test).&nbsp; If performance is substantially better outside the tunnel it is definitely a MTU/frag issue.</P> <P>&nbsp;</P> Wed, 22 Dec 2021 21:48:28 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/throughput-of-site2site-VPN/m-p/136990#M20731 Timothy_Hall 2021-12-22T21:48:28Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/throughput-of-site2site-VPN/m-p/136991#M20732 <P>Thank you for answering, i'll definitely put that to the test!</P> Wed, 22 Dec 2021 15:01:14 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/throughput-of-site2site-VPN/m-p/136991#M20732 Kleber_Nunes 2021-12-22T15:01:14Z