Windows 11 - Very Slow VPN Connection

[ChristopherLDR]

We upgrade some PCs to Windows 11 and noted the VPN Connection is significantly affected. A speed test from google indicates acceptable speeds, however, when accessing the server it is not responsive (times out and can not download files) and One Drive no longer works (i.e. can't download files). As soon as disconnecting from the VPN all issues are resolved, and as soon as the PC is reverted by to Windows 10 issues are resolved.

Any suggestions?

Also, currently running version (MX 15.42.1).

[Fragobar1]

This KB5028254 does not apply to my OS. (same for KB5028185)

I'm running Win 11 Pro with up to date patchs (22621.2134) and I still have this issue.

Starting "Routing and Remote Access service" fixes my problem immediately.

FWI: My MX85 is behind a NAT where i have to do some PAT to match ports 500 and 4500 between my ISP router and my Meraki FW

[bevans5]

I worked with Meraki support today and they suggested enabling the "Routing and Remote Access service".

It immediately fixes the problem for any affected PC!

Installing Wireshark and leaving it open in the background also works, but my team suspects that is because is it puts the NIC in promiscuous mode, which is inherently insecure to leave on all the time. As far as I can tell, there is no security risk in enabling the "Routing and Remote Access service". (Don't forget to set the Startup Type to automatic!)

[maenkep]

Thank you. This worked immediately for me as well.

For other amateurs like myself: Open up the Services app, scroll down the list to "Routing and Remote Access" (which is likely Disabled), right click to open properties, change the startup type (manual or auto) and hit Apply, then hit the Start button that should have become available. Done.

[wadavison]

I know I'm late to the party here but just thought I'd give my two cents.

Today I was able to set up AnyConnect on my Windows 11 computer and VPN to multiple MX64W's. Have had the slow VPN issue previously when using WiFi, but doesn't occur on ethernet. Wireshark worked and Remote services worked but only temporary solutions.

So in summary - if you are using the Windows native VPN and having trouble, try setting up AnyConnect (Cisco Secure Client) and see if it works. I didn't have to purchase any additional AnyConnect licenses or hardware. It was all good to go basically.

[Philip D'Ath]

You do need to purchase AnyConnect licences - they just aren't enforced. 🙂