https://live.paloaltonetworks.com/t5/general-topics/ipsec-tunnel-performance-tips/m-p/200259#M59264 <P>Hello folks,</P><P>&nbsp;</P><P>I've seen a this article about improving performance by enabling this Adjust TCP MSS.&nbsp; Ours is not enabled.</P><P><A href="https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Improve-Performance-for-IPSec-Traffic/ta-p/53301" target="_blank">https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Improve-Performance-for-IPSec-Traffic/ta-p/53301</A></P><P>&nbsp;</P><P>Would this be enabled on the public internet facing interface?</P><P>I do see some TCP retransmission and reassembled messages in the pcap.&nbsp;</P><P>&nbsp;</P><P>Our IPSec peer is complaining the application they are using from our side is very slow running and downloading Oracle Apex reports.&nbsp; Blaming the network and IPSec tunnel since the reports run much faster from Starbucks WiFi.</P><P>&nbsp;</P><P>Wondering if anyone may have a suggestion or comment?</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="ipsec_performance.jpg" style="width: 800px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/13792iDE1F13F70F437505/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="ipsec_performance.jpg" alt="ipsec_performance.jpg" /></span></P><P>&nbsp;</P><P>&nbsp;</P> Tue, 13 Feb 2018 17:39:24 GMT OMatlock 2018-02-13T17:39:24Z https://live.paloaltonetworks.com/t5/general-topics/ipsec-tunnel-performance-tips/m-p/200259#M59264 <P>Hello folks,</P><P>&nbsp;</P><P>I've seen a this article about improving performance by enabling this Adjust TCP MSS.&nbsp; Ours is not enabled.</P><P><A href="https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Improve-Performance-for-IPSec-Traffic/ta-p/53301" target="_blank">https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Improve-Performance-for-IPSec-Traffic/ta-p/53301</A></P><P>&nbsp;</P><P>Would this be enabled on the public internet facing interface?</P><P>I do see some TCP retransmission and reassembled messages in the pcap.&nbsp;</P><P>&nbsp;</P><P>Our IPSec peer is complaining the application they are using from our side is very slow running and downloading Oracle Apex reports.&nbsp; Blaming the network and IPSec tunnel since the reports run much faster from Starbucks WiFi.</P><P>&nbsp;</P><P>Wondering if anyone may have a suggestion or comment?</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="ipsec_performance.jpg" style="width: 800px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/13792iDE1F13F70F437505/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="ipsec_performance.jpg" alt="ipsec_performance.jpg" /></span></P><P>&nbsp;</P><P>&nbsp;</P> Tue, 13 Feb 2018 17:39:24 GMT https://live.paloaltonetworks.com/t5/general-topics/ipsec-tunnel-performance-tips/m-p/200259#M59264 OMatlock 2018-02-13T17:39:24Z https://live.paloaltonetworks.com/t5/general-topics/ipsec-tunnel-performance-tips/m-p/200367#M59278 <P>Hello,</P><P>While&nbsp;I could be wrog, I think the change should be made on the layer 3 interface you have your portal/gateway config connected to.</P><P>&nbsp;</P><P>Regards,</P> Tue, 13 Feb 2018 22:29:43 GMT https://live.paloaltonetworks.com/t5/general-topics/ipsec-tunnel-performance-tips/m-p/200367#M59278 OtakarKlier 2018-02-13T22:29:43Z