Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Tomas3miasto
Explorer

Slow download site-to-site VPN

We have had a problem downloading files via a VPN tunnel for some time now.
When I download a file from the headquarters to our office, our speed is about 15MB/s (sometimes more at startup, but after a while, it drops).
If I were uploading the same file (I am testing on a 1GB file) to the headquarters, the speed would be about 50MB/s.

Has anyone had a similar case?
I'm trying to diagnose it but so far without success.

Tomasz

 

0 Kudos
5 Replies
Lesley
Leader Leader
Leader

Site to site? Or client vpn? What encryption methods are used? Make sure not to use for example slow performance methods like 3des. What blades are enabled on the gateway 

-------
If you like this post please give a thumbs up(kudo)! 🙂
0 Kudos
Tomas3miasto
Explorer

site to site. Meshed Community

Meshed Community.png

 I have disabled almost all blades on my site. Now I have fw, vpn, anti_bot

 

0 Kudos
Lesley
Leader Leader
Leader

Try to move away from md5 and 3des not secure and cpu intens. Then test again. Could also be software bug what is cpinfo -y all output?

-------
If you like this post please give a thumbs up(kudo)! 🙂
0 Kudos
the_rock
Legend
Legend

I would refer to below sk.

Andy

https://support.checkpoint.com/results/sk/sk73980

0 Kudos
Timothy_Hall
Legend Legend
Legend

Almost certainly a sub-1500 MTU somewhere in your network path between the peers, see:

sk98074: MTU and Fragmentation Issues in IPsec VPN

Command tracepath run from one peer to the other can be used to confirm a low MTU is present.

Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events