topic SSL VPN over Dial-Up Speeds in General Topics

SSL VPN over Dial-Up Speeds

dshue — Tue, 27 Sep 2011 16:31:05 GMT

YES, you read it right! DIAL-UP speeds! Unfortunantly we have some users that have old 1x and iDEN air cards that are probably slower than some Dial-Up speeds. It is what it is I suppose. Our old IPSEC vpn (Check Point) client really didn't complain about it much, it was slow but still connected. We are moving our users over to the Palo Alto SSL VPN, and we're not having alot of luck with these slow devices. Broadband users, no problem! With these iDEN devices, I have the client installed (manually from the MSI), I can login, get the spalsh screen, get the client status window... 'Connecting......' , 'connecting.......', 'Disconnected'. It says it can't contact the server. I know it's related to the slow connection, but is there anything I can do to prevent a timeout or whatever else might be happening here? Is there an alternative to the Palo Alto client that I can use and go back to an IPsec tunnel?

TIA

Re: SSL VPN over Dial-Up Speeds

kbrazil — Tue, 27 Sep 2011 17:22:23 GMT

I wonder if it's not just the speed of the link, but perhaps the MTU is lower and it's breaking up the packets in a way the firewall is not expecting? Then again, maybe it's just taking too long to connect. Sounds like a support case and packet capture may be necessary.

Cheers,

Kelly

Re: SSL VPN over Dial-Up Speeds

jleung — Sun, 09 Oct 2011 11:20:34 GMT

Hi,

As Kelly mentioned, it is very likely a MTU issue. Please go to the tunnel interface and change the MTU (default is 1500).

Regards,

Jones