We have an HA pair of 4110 FTDs that was running 6.6.4 until around 1.5 weeks ago when we upgraded to 7.0.1. Since then, we've had several reports about poor performance, with many stating latency problems. The connection event table is showing the traffic is being allowed, but when we do a packet capture, we have *lots* of duplicate acknowledgements, TCP-out-of-order, and hard resets - overall, it just looks pretty ugly. This is to multiple sites where the sources are on the internal network and destinations are on the Internet. We're seeing similar issues for users on their desktops and laptops that are on premise, in addition to users that utilize VDI systems. For users that are external and don't use our network, response of servers may be 10x faster. We've brought all our teams together, and the captures bring me the most concern.
I created a fastpath rule for some of the most critical traffic, but this hasn't helped at all.
Has anyone else experienced problems like this after an upgrade? Any thoughts as to what we might try? Thank you.
