topic Re: IPsec VPN throughput in General Topics

IPsec VPN throughput

Mohammed_Naji — Tue, 28 Aug 2018 12:06:38 GMT

configured site to site ipsec vpn between PA 820(head offc)XG firewall (branch offc)successfully. in the head offc we have 100 mbps download , 25 mbps upload speed and brach we have 100 mbps download and 50mbps upload speed. the vpn performance is very slow. what could be the reason???

Re: IPsec VPN throughput

OtakarKlier — Tue, 28 Aug 2018 16:51:27 GMT

Hello,

While you have provided the circuit speeds, what throughput are you getting? Are both firewall's on newer code? Also check routing to see if there are any loops? One thing to check is DNS, if its taking a long time to resolve, this could be an indicator as well.

Hope that helps.

Re: IPsec VPN throughput

BPry — Wed, 29 Aug 2018 00:18:19 GMT

@Mohammed_Naji,

In addition to what @OtakarKlier already stated, do you have a baseline latency between the two public IPs to compare things with? If you've got latency between the two devices without the IPSec tunnel being up you may be chasing the wrong rabbit. If that looks good one of the first things I would check is MTU; that can cause snail like performance even with a solid connection.

Re: IPsec VPN throughput

ce1028 — Wed, 29 Aug 2018 03:44:17 GMT

What type of traffic is slow across the VPN? Is it SMB traffic?