Helpful ReplyHot!Slow uploading speed on VPN tunnel

Author
Vishalv16
New Member
  • Total Posts : 5
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/08/15 06:31:18
  • Status: offline
2019/08/15 06:42:02 (permalink)
0

Slow uploading speed on VPN tunnel

We have fortigate 300E ( india office) & 100D (US office) both are connected via IPSEC tunnel.
Link speed US  office 10 Mbps down / 3 mbps UP
Link speed India office 20 mbps down / 8 mbps

now issue is on IPSEC tunnel when i copy file from India office  to US office it give me speed around 1 Mbps But in reverse it gave only 100-120 kbps
On SSL-VPN tunnel its even worse when i copy file from SSL-client to US office it give me speed around 800 kbps But in reverse it gave only 30-50 kbps max

can anyone suggest me something how can i increase the speed of data transfer from US to india or US to SSL use
Thanks in advance  

#1
Dave Hall
Expert Member
  • Total Posts : 1475
  • Scores: 162
  • Reward points: 0
  • Joined: 2012/05/11 07:55:58
  • Location: Canada
  • Status: offline
Re: Slow uploading speed on VPN tunnel 2019/08/16 12:15:35 (permalink)
0
What OS version of firmware are running on both fgts?  How are the file coping being performed?  SMB?  Has the MTU values be set (or need to be set) accordingly?

NSE4/FMG-VM64/FortiAnalyzer-VM/5.4/6.0 (FWF40C/FW92D/FGT200D/FGT101E)/ FAP220B/221C
#2
OneOfUs
Bronze Member
  • Total Posts : 30
  • Scores: 4
  • Reward points: 0
  • Joined: 2019/07/16 06:32:59
  • Status: offline
Re: Slow uploading speed on VPN tunnel 2019/08/16 19:10:15 (permalink) ☄ Helpfulby ede_pfau 2019/08/17 01:48:06
0
How are you evaluating the transfer speeds?  If this is a CIFS/SMB transfer the rate is showing in MB (Megabytes/sec) while you WAN connectivity is in Mb (Megabits/sec)  I 1MB transfer on a 8Mb connection would be expected.
 
For throughput testing the Fortigate has a built in iperf "client" diagnose traffictest.  iperf is a great way to test your connections capabilities.
https://help.fortinet.com/fos50hlp/52data/Content/FortiOS/fortigate-whats-new-52/new-features-5.2.5.htm
 
In regards to IPSEC vs SSL VPN, in older versions of firmware SSL VPN used tcp which was much slower, however 5.4 and newer use udp which should have similar performance to IPSEC.
#3
Vishalv16
New Member
  • Total Posts : 5
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/08/15 06:31:18
  • Status: offline
Re: Slow uploading speed on VPN tunnel 2019/08/18 23:48:21 (permalink)
0
india has 6.0.4 , US Has 6.0.2 firmware
its using SMB
#4
zaphod
New Member
  • Total Posts : 19
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/08/19 01:42:28
  • Status: online
Re: Slow uploading speed on VPN tunnel 2019/08/19 04:35:29 (permalink)
0
update both to 6.0.6 and test again.
#5
Vishalv16
New Member
  • Total Posts : 5
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/08/15 06:31:18
  • Status: offline
Re: Slow uploading speed on VPN tunnel 2019/09/06 04:18:56 (permalink)
0
only solution i got for now that i created one IPSec tunnel for remote user using VPN wizard now connection speed little improved but the now am having other issue 
we have one website that is accessible from our network only which was working fine when connected to SSL
but with IPSec remote VPN its not working

Note: i have created same policy as we had for ssl vpn to access that website.
let me know if any solution over this

Thanks in Advance
#6
zaphod
New Member
  • Total Posts : 19
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/08/19 01:42:28
  • Status: online
Re: Slow uploading speed on VPN tunnel 2019/09/06 04:22:02 (permalink)
0
correct the policy for access the website and put right ip-network in it (the source ip net from the vpn-tunnel)...
 
 
#7
Vishalv16
New Member
  • Total Posts : 5
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/08/15 06:31:18
  • Status: offline
Re: Slow uploading speed on VPN tunnel 2019/09/06 04:34:54 (permalink)
0
hi  Zaphod,

thanks for quick reply.
i did have put the right ip range address with that IPsec user getting connected to local network everthing is working fine the are able to access local network only thing is that traffic is not going to the new policy that i have created for that website for ipsec users.

PFA for reference for policy both IPsec & SSL. 
  
post edited by Vishalv16 - 2019/09/06 04:40:43

Attached Image(s)

#8
zaphod
New Member
  • Total Posts : 19
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/08/19 01:42:28
  • Status: online
Re: Slow uploading speed on VPN tunnel 2019/09/06 04:46:19 (permalink)
0
- check the phase 2 definition for the ipsec-tunnel, is traffic to external site allowed in phase2?
- the policy is wrong if you use ipsec-tunnel... 
 
#9
Vishalv16
New Member
  • Total Posts : 5
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/08/15 06:31:18
  • Status: offline
Re: Slow uploading speed on VPN tunnel 2019/09/06 06:28:21 (permalink)
0
Hi zaphod,

I have allowed that particular website on in Phase 2 of Ipsec tunnel( please note this is remote Ipsec VPN for single user work with forticlient)

please guide me about proper policy for the same
#10
brittany
New Member
  • Total Posts : 3
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/08/27 11:06:51
  • Status: offline
Re: Slow uploading speed on VPN tunnel 2019/09/07 10:38:55 (permalink)
0
I don't know about much but you can configure one manually, with phase 1 and phase 2 proposals you prefer. There should be no difference in throughput depending on one or other method to be used. 
#11
Jump to:
© 2019 APG vNext Commercial Version 5.5