topic Re: Slow Download and Uploads From Various Cloud Providers in Next-Generation Firewall Discussions

Slow Download and Uploads From Various Cloud Providers

Tshaw89 — Tue, 26 Nov 2024 17:32:25 GMT

Hello All,
3220 running 10.2.10h7
We have recently migrated a couple of our services to cloud providers away from prem and have since had issues with slowness with uploads and downloads to the servers.

- 2-1Gb connections but for now we have PBF Rule sending traffic out to a preferred uplink
- No QoS
- App overrides in place and traffic is being identified as custom app
- SRI disabled
- Not decrypting
- No security profiles, file scanning
- Confirmed interface is negotiating at 1000 full
- Tried removing External Zone Protection Profile which did nothing.
- Meetings with vendors proved fruitless
- Huge improvements when bypassing the 3220 and going into the ISP appliance
- We are nowhere near hitting max sessions or CPS to trigger ZPP or hardware usage but i checked the ZPP to make sure we had alarm, activate, max configured correctly.
- Various speedtests show we are getting much better speeds than what we are experiencing with these cloud providers (I always take the speedtests with a scoop of salt but still).

Any ideas? I can provide more info if needed.

Re: Slow Download and Uploads From Various Cloud Providers

BPry — Tue, 26 Nov 2024 17:50:09 GMT

@Tshaw89,

What kind of traffic are we talking about here when you mention upload/download, is it SMB/HTTPS/FTP/etc? Just to verify when you say custom app you mean that you created an entirely custom app-id for the traffic correct, not overwriting traffic to an existing ID that could have decoders?

Re: Slow Download and Uploads From Various Cloud Providers

Tshaw89 — Tue, 26 Nov 2024 17:54:57 GMT

From one of the services the files are typically Tiff files.
For the other services they are usually images of machines (phones, computers) as well as some video.

The traffic typically just traverses http and https as well as some non standard ports. Yes these are custom apps and not modified of existing ones.
Custom apps applied to app overrides and applied to security rules.

Re: Slow Download and Uploads From Various Cloud Providers

Tshaw89 — Wed, 18 Dec 2024 16:15:19 GMT

After looking at some of our other infrastructure we found a a large number of dropped packets on the main connection between our core and the firewall. Despite the 1Gb port not nearing max utilization at any time we decided to swap this to a 10Gb connection and so far this has resolved the issue with at least one of the services.