New Member

Solved

Slow VPN speed

Forum|Forum|7 years ago
September 11, 2018
34 replies
192137 views

Hello! Please, help me.

We use FortiGate 200E in our company.

I have difficulty using the VPN. The speed when connecting to VPN is only 1-2 mbps. How can I fix this? The channel at both ends of 50 mbps

Best answer by Ashik_Sheik

Hi,

Are you using SSL or IPSEC .? Is it site to site or Remote access ?

Speed is always depending on your internet bandwidth .If the Internet Link is over utilized then there is no much room for VPN traffic .You better focus on bandwidth management .

Regds,

Ashik

Ashik_SheikAnswer

New Member

Hi,

Are you using SSL or IPSEC .? Is it site to site or Remote access ?

Speed is always depending on your internet bandwidth .If the Internet Link is over utilized then there is no much room for VPN traffic .You better focus on bandwidth management .

Regds,

Ashik

armeez88Author

New Member

SSL. This is remote access. I tried to download files from the local network to my laptop and no more traffic was used.

Toshi_Esumi

SuperUser

I assume you meat 50Mup/50Mdown on both ends for the internet circuits. What kind of numbers did you see when you run just local internet speedtest (like speedtest.net if in US)? Were they about 50M/50M on both ends?

Duncan

New Member

I'm having the same problem. I have a ticket open with Fortinet. I get about 3Mbps out of our 25Mbps connection (real speed - claimed is 50Mbps). We have two FortiGates with the same symptom (a 200E and 100E). It is slow SSL, IPsec and native IPsec remote access VPNs. I suspect it is since we upgraded to FortiOS 6.0 (we only had the firewalls for 1 week before we upgraded). Mysteriously, I benchmarked around 17Mbps twice (on different days) without any configuration changes. Two hours later, the VPN was slow again.

Did you sort yours out armeez88?

avajack

New Member

I must recommend to you PureVPN, and NordVPN. both are Fast VPNs. I have been a user of PureVPN for more than a year. here the guide vpnranks.com

Eric55

New Member

Try enable/disabled DTSL and sniff traffic from FortiClient to FortiGate

Duncan

New Member

Why? What am I looking for? I think Fortinet support did this yesterday while troubleshooting. They've esculated to development as they believe it is a bug. The firewall is peeking at about 300Mbps (bypassing our ISP) where it should be getting around 900Mbps.

bartman10

New Member

I have the EXACT same issue! The traffic in your pic is exactly like mine. Up and down with 355kb/sec. We have a Active-Passive 300E cluster on a 100/100mbit fiber pipe.

If I have DTSL enabled FortiClient hangs at 98%, then asks to log in again. Speed is also bad for IPSec.

I also have a ticket open with TAC and we are having a great conversation about enabeling/disabeling DTLS on the Fortigate... but no further progress.

Sorry meant to add, Duncan can you PM me your ticket number so I can add it to my ticket for ref?

Carl_Smith

New Member

VPNs are great for protecting your privacy and seeping your data secure, but almost all VPNs come with one major downside: they slow down your internet connection. Many VPNs slow you down as much as 50%. This can make trying to stream a movie or have a video chat almost impossible

If you search the help pages on any VPN service they will tell you to check the same things when trying to fix a slow VPN experience:

[ul]

Check your internet router

See if your ISP is throttling your connection

Use the server closest to you geographically[/ul]

Reading the same advice over and over again can make you feel like you are the problem. But, the truth is most of the time your router is fine, your ISP is delivering the speed it promised, and you are using the closest server.

bmastersroot

New Member

We just hit this same issue attempting an upgrade of a 201E from 5.6.x to 6.0.3. Even though the spoke sites had been upgraded already, when we upgraded the hub site to match, it killed VPN performance across the board. Throughput dropped by a factor of 10. As a last gasp, we upgraded to 6.0.4 and the issue was resolved. Performance was back to normal. We were even able to upgrade to CHACHA20POLY1305-PRFSHA512 encryption across the board with no decrease in performance.

The release notes mention a bugfix, specifically 515375, regarding the VPN going down randomly. But whatever was causing these drops must have also been a cause of the poor performance.

NavinJanamp

New Member

It's better to talk directly to the services provider. They can resolve the issue.

martin_103

New Member

So we have the same issues on a couple of devices. FortiGate 60E, 100E, 200E, Running OS 6.0.4, 5.6.x and so on. Tried with DTLS, no change. Also no Bandwidth issues on both sites. Upload through SSL VPN stuck at 355 KB/s.

Are there any news regarding this issue?

rmcclain64

New Member

I'm having the same issue.

Forticlient.jpg

juniper_fan2

New Member

We're in the process of migrating some SRX/SSG hub sites that terminate to a SSG140 over to a Fortinet 100e.

We migrated a site with newer SRX300 and SMB file copy IPsec tunnel performance is as expected in both directions.

Migrated a site with an old SSG5 and SMB file copy IPsec tunnel performance is as expected in both directions.

Migrated a site with a SRX220h and SMB file copy IPsec download to site is as expected. Upload from site appears to max out at the exact 355kbps speed.

Current 100e firmware is: v6.2.3 build1066 (GA)

*Update: So i logged into an RDP session @ the remote site and did a download test from Hub site and got the expected performance. Did an Upload to a server @ Hub site and it was close to 10x faster. Closer to what it should be, but not quite.

felipe_Nascimento

New Member

I'm having the same issue.

Someone managed to solve?

david_ekstrom

New Member

I know this is an old thread, but we are seeing more than a 50% drop between a user's native speed versus when on VPN. Their internet provider speed is 150M, on VPN it's 46M. We are on a FortiGate 200E running 7.0.9. The user has FortiClient via EMS, version 7.0.7

Has there ever been a solution? We migrated from an old Cisco ASA 5512 and AnyConnect, which was way better performance. This almost makes me want to just go back.

Zwirni

New Member

Hallo Zusammen,

das Thema gibt es ja nun schon sehr lange. Wir sind eine Hausverwaltung für Gewerbeeinheiten. Wir teilen unseren Internet-Anschluss mit vielen Firmen. Unser Anschluss hat eine Breite von 1Gbit sync.
Wir nutzen hier eine Fortigate 100F mit der Firmware "v7.2.8 build1639 (Mature)". Der normale Internetdurchsatz ist bei allen in Ordnung. Aber sobald die Firmen von ihren Rechnern aus eine Client-VPN Verbindung in ihre Zentralen aufbauen reduziert sich der Speed auf die 355 KB/s! Gibt es dafür jetzt eine Lösung? Hier greift definitiv die Fortigate ein. Aber wo?

CoBthePrez

New Member

Same issue, any actual resolution? 355 KB/s transfer rate, same as most everyone else, and unexpectedly high latency. (50-60ms) FortiOS 7.2.7

Sign up

Login with SSO

Login to the community

Login with SSO