topic Re: Slow upload speed via STS ipsec FTD, FTDv ver=7.3 in Network Security

Slow upload speed via STS ipsec FTD, FTDv ver=7.3

jararaca — Sat, 02 Sep 2023 14:41:03 GMT

Hi Everyone
There are problems with FTD 1010, FTDv, FTD controlled via FDM
Ipsec sts is configured, but the download speed is 20 mb, and the upload speed is 2 mb through this tunnel. Tunnels are established through high-speed Internet channels. At first, I thought that the problem was in FTD 1010, but then I installed FTDv and got the same speed there. I change FTD to Zyxel ATP and the download speed changes to 25 mb, the upload speed changes to 25 mb. mss reduced - there is no problem here. Also no fragmentation

Why is the upload speed slowing down?

Can someone help with a solution?

Software ver=7.3.1.1-83

Re: Slow upload speed via STS ipsec FTD, FTDv ver=7.3

Mark Elsen — Sat, 02 Sep 2023 16:39:20 GMT

- Check established MTU on the tunnel , if it seems low try if you can tweak it ,

Re: Slow upload speed via STS ipsec FTD, FTDv ver=7.3

jararaca — Sat, 02 Sep 2023 16:49:27 GMT

This problem is not in MTU!

Re: Slow upload speed via STS ipsec FTD, FTDv ver=7.3

Mark Elsen — Sat, 02 Sep 2023 17:02:39 GMT

- Good to know! Have you checked the current value of the MTU ?

Re: Slow upload speed via STS ipsec FTD, FTDv ver=7.3

jararaca — Sat, 02 Sep 2023 18:24:28 GMT

It's ipsec-l2l, it doesn't have an MTU. I tried changing the MSS size, nothing changes.

Configuration Output->

Connection Name: *.*.*.*

Type: Policy Based

VPN Access Interfaces: outside (*.*.*.*)
Network: *.*.*.*

Peer IP Address: *.*.*.*
Peer Network: Network*.*.*.*

IKE Version 2
IKE Policy: aes-sha-sha-21,19,20
IPSec Proposal: aes-sha-1
Authentication Type: Pre-shared Manual Key

IKE Version 1: Disabled

IPSec Settings
Lifetime Duration: 28800 seconds
Lifetime Size: 4608000 kilobytes

Additional Options
NAT Exempt: —

Diffie-Hellman Group: Null (not selected)

Re: Slow upload speed via STS ipsec FTD, FTDv ver=7.3

jararaca — Mon, 04 Sep 2023 16:25:35 GMT

Hi!

No working solution has been proposed. And no answers were given. Anyone else have some advice to share?

Re: Slow upload speed via STS ipsec FTD, FTDv ver=7.3

Mark Elsen — Mon, 04 Sep 2023 17:03:28 GMT

- Note that the community is populated by customers and (Cisco) product users and it based on best effort (only) ; for official support in need for business solutions consider : https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html