Slow uploading speed on VPN tunnel

10 replies
18956 views

We have fortigate 300E ( india office) & 100D (US office) both are connected via IPSEC tunnel. Link speed US office 10 Mbps down / 3 mbps UP Link speed India office 20 mbps down / 8 mbps now issue is on IPSEC tunnel when i copy file from India office to US office it give me speed around 1 Mbps But in reverse it gave only 100-120 kbps On SSL-VPN tunnel its even worse when i copy file from SSL-client to US office it give me speed around 800 kbps But in reverse it gave only 30-50 kbps max can anyone suggest me something how can i increase the speed of data transfer from US to india or US to SSL use Thanks in advance

OneOfUsAnswer

New Member

How are you evaluating the transfer speeds? If this is a CIFS/SMB transfer the rate is showing in MB (Megabytes/sec) while you WAN connectivity is in Mb (Megabits/sec) I 1MB transfer on a 8Mb connection would be expected.

For throughput testing the Fortigate has a built in iperf "client" diagnose traffictest. iperf is a great way to test your connections capabilities.

https://help.fortinet.com/fos50hlp/52data/Content/FortiOS/fortigate-whats-new-52/new-features-5.2.5.htm

In regards to IPSEC vs SSL VPN, in older versions of firmware SSL VPN used tcp which was much slower, however 5.4 and newer use udp which should have similar performance to IPSEC.

Dave_Hall

New Member

What OS version of firmware are running on both fgts? How are the file coping being performed? SMB? Has the MTU values be set (or need to be set) accordingly?

OneOfUsAnswer

New Member

How are you evaluating the transfer speeds? If this is a CIFS/SMB transfer the rate is showing in MB (Megabytes/sec) while you WAN connectivity is in Mb (Megabits/sec) I 1MB transfer on a 8Mb connection would be expected.

For throughput testing the Fortigate has a built in iperf "client" diagnose traffictest. iperf is a great way to test your connections capabilities.

https://help.fortinet.com/fos50hlp/52data/Content/FortiOS/fortigate-whats-new-52/new-features-5.2.5.htm

In regards to IPSEC vs SSL VPN, in older versions of firmware SSL VPN used tcp which was much slower, however 5.4 and newer use udp which should have similar performance to IPSEC.

brittany

New Member

I don't know about much but you can configure one manually, with phase 1 and phase 2 proposals you prefer. There should be no difference in throughput depending on one or other method to be used.

Sign up

Login with SSO

Login to the community

Login with SSO