AnsweredHot!Slow VPN speed

Page: 12 > Showing page 1 of 2
Author
armeez88
New Member
  • Total Posts : 4
  • Scores: 0
  • Reward points: 0
  • Joined: 2018/09/11 07:02:44
  • Status: offline
2018/09/11 07:11:04 (permalink)
0

Slow VPN speed

Hello! Please, help me. 
We use FortiGate 200E in our company.
I have difficulty using the VPN. The speed when connecting to VPN is only 1-2 mbps. How can I fix this? The channel at both ends of 50 mbps
#1
Ashu
Gold Member
  • Total Posts : 150
  • Scores: 13
  • Reward points: 0
  • Joined: 2015/04/17 04:33:45
  • Location: Doha,Qatar
  • Status: offline
Re: Slow VPN speed 2018/09/11 08:00:28 (permalink) ☼ Best Answerby armeez88 2018/09/11 08:02:46
0
Hi,
 
Are you using SSL or IPSEC .? Is it site to site or Remote access ?
 
Speed is always depending on your internet bandwidth .If the Internet Link is over utilized then there is no much room for VPN traffic .You better focus on bandwidth management .
 
Regds,
 
Ashik
#2
armeez88
New Member
  • Total Posts : 4
  • Scores: 0
  • Reward points: 0
  • Joined: 2018/09/11 07:02:44
  • Status: offline
Re: Slow VPN speed 2018/09/11 08:05:09 (permalink)
0
SSL. This is remote access. I tried to download files from the local network to my laptop and no more traffic was used.
#3
Toshi Esumi
Expert Member
  • Total Posts : 1648
  • Scores: 139
  • Reward points: 0
  • Joined: 2014/11/06 09:56:42
  • Status: offline
Re: Slow VPN speed 2018/09/11 14:39:38 (permalink)
0
I assume you meat 50Mup/50Mdown on both ends for the internet circuits. What kind of numbers did you see when you run just local internet speedtest (like speedtest.net if in US)? Were they about 50M/50M on both ends?
#4
armeez88
New Member
  • Total Posts : 4
  • Scores: 0
  • Reward points: 0
  • Joined: 2018/09/11 07:02:44
  • Status: offline
Re: Slow VPN speed 2018/09/12 03:07:38 (permalink)
0
toshiesumi
I assume you meat 50Mup/50Mdown on both ends for the internet circuits. What kind of numbers did you see when you run just local internet speedtest (like speedtest.net if in US)? Were they about 50M/50M on both ends?


Now I tested using LTE. When the VPN is connected, the speed is 30/9 mbps. After that, I tried to download the file from the local network to my laptop and the download speed did not exceed 500 kb/s
 


#5
Duncan
New Member
  • Total Posts : 13
  • Scores: 2
  • Reward points: 0
  • Joined: 2018/09/11 20:10:29
  • Status: offline
Re: Slow VPN speed 2018/09/27 22:03:08 (permalink)
5 (1)
I'm having the same problem. I have a ticket open with Fortinet. I get about 3Mbps out of our 25Mbps connection (real speed - claimed is 50Mbps). We have two FortiGates with the same symptom (a 200E and 100E). It is slow SSL, IPsec and native IPsec remote access VPNs. I suspect it is since we upgraded to FortiOS 6.0 (we only had the firewalls for 1 week before we upgraded). Mysteriously, I benchmarked around 17Mbps twice (on different days) without any configuration changes. Two hours later, the VPN was slow again.
 
Did you sort yours out armeez88?
#6
Eric55
New Member
  • Total Posts : 1
  • Scores: 0
  • Reward points: 0
  • Joined: 2018/10/15 01:23:24
  • Status: offline
Re: Slow VPN speed 2018/10/15 01:32:17 (permalink)
0
Try enable/disabled DTSL and sniff traffic from FortiClient to FortiGate 
#7
Duncan
New Member
  • Total Posts : 13
  • Scores: 2
  • Reward points: 0
  • Joined: 2018/09/11 20:10:29
  • Status: offline
Re: Slow VPN speed 2018/10/15 14:15:23 (permalink)
0
Why? What am I looking for? I think Fortinet support did this yesterday while troubleshooting. They've esculated to development as they believe it is a bug. The firewall is peeking at about 300Mbps (bypassing our ISP) where it should be getting around 900Mbps.
#8
bartman10
Silver Member
  • Total Posts : 88
  • Scores: 18
  • Reward points: 0
  • Joined: 2014/05/01 18:22:38
  • Status: offline
Re: Slow VPN speed 2018/10/23 11:47:30 (permalink)
0
I have the EXACT same issue! The traffic in your pic is exactly like mine. Up and down with 355kb/sec. We have a Active-Passive 300E cluster on a 100/100mbit fiber pipe. 
 
If I have DTSL enabled FortiClient hangs at 98%, then asks to log in again. Speed is also bad for IPSec.
I also have a ticket open with TAC and we are having a great conversation about enabeling/disabeling DTLS on the Fortigate... but no further progress.
 
Sorry meant to add, Duncan can you PM me your ticket number so I can add it to my ticket for ref?

300E x3, 200D, 140D, 94D, 90D x2, 80D, 40C, handful of 60E's.. starting to loose track.
Over 100 WiFi AP's and growing.
FAZ-200D
FAC-VM 2 node cluster
Friends don't let friends FWF!
#9
Duncan
New Member
  • Total Posts : 13
  • Scores: 2
  • Reward points: 0
  • Joined: 2018/09/11 20:10:29
  • Status: offline
Re: Slow VPN speed 2018/10/23 12:44:29 (permalink)
0
PM'ed you the ticket number. The ticket has been escalated to development as we've proven a bug in FortiGate.
FYI, the support tech and I tried IPsec, lowing TLS version and cypher and hardware acceleration with no avail.
Last week FortiOS 6.0.3 was released so I am planning to install that tonight. I'll let you know the results.
#10
bartman10
Silver Member
  • Total Posts : 88
  • Scores: 18
  • Reward points: 0
  • Joined: 2014/05/01 18:22:38
  • Status: offline
Re: Slow VPN speed 2018/10/23 12:47:58 (permalink)
0
Great thanks for the update. 

300E x3, 200D, 140D, 94D, 90D x2, 80D, 40C, handful of 60E's.. starting to loose track.
Over 100 WiFi AP's and growing.
FAZ-200D
FAC-VM 2 node cluster
Friends don't let friends FWF!
#11
Duncan
New Member
  • Total Posts : 13
  • Scores: 2
  • Reward points: 0
  • Joined: 2018/09/11 20:10:29
  • Status: offline
Re: Slow VPN speed 2018/10/23 13:28:37 (permalink)
0
Replying to you PM, yes enabling DTLS on my client works but it doesn't solve the bandwidth problem. I'm running the the same versions as you.
#12
armeez88
New Member
  • Total Posts : 4
  • Scores: 0
  • Reward points: 0
  • Joined: 2018/09/11 07:02:44
  • Status: offline
Re: Slow VPN speed 2018/10/25 04:14:49 (permalink)
0
Duncan
PM'ed you the ticket number. The ticket has been escalated to development as we've proven a bug in FortiGate.
FYI, the support tech and I tried IPsec, lowing TLS version and cypher and hardware acceleration with no avail.
Last week FortiOS 6.0.3 was released so I am planning to install that tonight. I'll let you know the results.


 
Tell please, did you install new firmware? Problem with low speed actually?
#13
Duncan
New Member
  • Total Posts : 13
  • Scores: 2
  • Reward points: 0
  • Joined: 2018/09/11 20:10:29
  • Status: offline
Re: Slow VPN speed 2018/10/25 12:46:35 (permalink)
0
Yes I did install it. Unfortunately it made not difference to the VPN performance.
#14
yogaarie
New Member
  • Total Posts : 1
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/01/03 22:43:17
  • Status: offline
Re: Slow VPN speed 2019/01/03 22:47:44 (permalink)
0
i have the same issue using openssl vpn and very slow access to my server
#15
Carl Smith
New Member
  • Total Posts : 2
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/01/05 01:01:45
  • Status: offline
Re: Slow VPN speed 2019/01/05 01:46:57 (permalink)
0
VPNs are great for protecting your privacy and seeping your data secure, but almost all VPNs come with one major downside: they slow down your internet connection. Many VPNs slow you down as much as 50%. This can make trying to stream a movie or have a video chat almost impossible
If you search the help pages on any VPN service they will tell you to check the same things when trying to fix a slow VPN experience:
  • Check your internet router
  • See if your ISP is throttling your connection
  • Use the server closest to you geographically
Reading the same advice over and over again can make you feel like you are the problem. But, the truth is most of the time your router is fine, your ISP is delivering the speed it promised, and you are using the closest server.
#16
bmastersroot
New Member
  • Total Posts : 1
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/01/17 19:21:50
  • Status: offline
Re: Slow VPN speed 2019/01/17 19:27:37 (permalink)
0
We just hit this same issue attempting an upgrade of a 201E from 5.6.x to 6.0.3.  Even though the spoke sites had been upgraded already, when we upgraded the hub site to match, it killed VPN performance across the board.  Throughput dropped by a factor of 10.  As a last gasp, we upgraded to 6.0.4 and the issue was resolved.  Performance was back to normal.  We were even able to upgrade to CHACHA20POLY1305-PRFSHA512 encryption across the board with no decrease in performance. 
 
The release notes mention a bugfix, specifically 515375, regarding the VPN going down randomly.  But whatever was causing these drops must have also been a cause of the poor performance.
#17
NavinJanamp
New Member
  • Total Posts : 2
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/01/21 03:52:00
  • Status: offline
Re: Slow VPN speed 2019/01/22 11:27:29 (permalink)
0
It's better to talk directly to the services provider. They can resolve the issue.
#18
martin_103
New Member
  • Total Posts : 1
  • Scores: 0
  • Reward points: 0
  • Joined: 2013/05/24 04:43:02
  • Status: offline
Re: Slow VPN speed 2019/02/21 07:12:31 (permalink)
0
So we have the same issues on a couple of devices. FortiGate 60E, 100E, 200E, Running OS 6.0.4, 5.6.x and so on. Tried with DTLS, no change. Also no Bandwidth issues on both sites. Upload through SSL VPN stuck at 355 KB/s.
Are there any news regarding this issue?
#19
schofjosh
New Member
  • Total Posts : 2
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/03/08 13:43:33
  • Status: offline
Re: Slow VPN speed 2019/03/08 14:15:26 (permalink)
0
CIFS and NFS over WAN VPN will always inherently be slower because of the way the protocols work.  Read the following article that will help explain why bandwidth isn't necessarily the issue.
https://www.eetimes.com/document.asp?doc_id=1272058#
 
One thing you can check that might help your VPN performance is enabling DTLS on your SSL settings.
https://kb.fortinet.com/kb/documentLink.do?externalID=FD38162
 
#20
Page: 12 > Showing page 1 of 2
Jump to:
© 2019 APG vNext Commercial Version 5.5