Umbrella Module and Cisco Secure Client SWG - Slower Load Times

[jaismith]

We are implementing endpoint SWG using the Umbrella Module and Secure Client and we have noticed an increase in the time it takes to load a web page. This is especially true for sites with a lot of CDN content (advertisements, video, etc). Since the issue is not as apparent with SWG turned off, I do not believe this is occurring at the DNS layer, but I would like a way to prove that before making any assumptions. So far we have tried blocking Ads at the DNS and Web level with no luck. We tried turning Intelligent proxy on, which made it worse. We also tried disabling HTTPS inspection and adding specific sites to the selective decryption list with no luck. Has anyone been able to implement this successfully without impacting latency?

[Ken Stieers]

What version?
Is Secure Endpoint also installed. If so, what version?

Both products have had issues of late.

5.1.8 had some issues, they released a new build, (122?) and someone posted about issues there too...

Secure Endpoint 8.4.x has also been problematic, causing slow performance with browsers and powershell.

[Shamrock]

Did you find resolution to this issue?  If so, was it Secure Endpoint 8.4?

[Chris Johnson]

I would like to find out about this resolution also. I am having the issue when trying to implement this module.

[Shamrock]

For whatever it's worth, the issue we were seeing was due to an ISP upstream carrier bottleneck issue.  Once they re-routed to a different link with higher speed, our connectivity to SWG improved significantly.  Back to the 250Mbps max.  This was apparent for all SWG traffic routing to the LA Data Center for Umbrella.