OUTGOING TRAFFIC ISSUE

[siddu099]

Hi expertise,

In our checkpoint firewall we did the DNAT AND SNAT for the server

10.40.1.30 we are getting 1gbs downloading speed but we are facing issue on uploading speed its not going more than 1MB

gateway 10.40.1.1 on checkpoint firewall 

whenever we bypass the firewall, we are getting good speed of uploading and downloading 

 

[Lesley]

We need more info to give a direction you have to look for, can be a lot of things.

What hw / sw is this? Have you checked interface speed / duplex values? Any blades enabled? Interface errors? What you see in cpview under interface? What is the peak traffic there for RX and TX on internet interface? QoS blade enabled? etc etc

[MarcuzShinz]

Have you checked all the logs related to this server?
Including: HTTPS Inspection, Stateful Inspection logs, and Threat Prevention features. Don’t focus on the speed test for now — try uploading something somewhere and monitor the logs instead.

Also, make sure the MTU between the firewall and the related devices is the same. Use the command netstat -i to check whether any interfaces are dropping too many packets.

[the_rock]

I always found issues like this to be related to MTU size.