Slow upload speed via STS ipsec FTD, FTDv ver=7.3

[jararaca]

Hi Everyone
There are problems with FTD 1010, FTDv, FTD controlled via FDM
Ipsec sts is configured, but the download speed is 20 mb, and the upload speed is 2 mb through this tunnel. Tunnels are established through high-speed Internet channels. At first, I thought that the problem was in FTD 1010, but then I installed FTDv and got the same speed there. I change FTD to Zyxel ATP and the download speed changes to 25 mb, the upload speed changes to 25 mb. mss reduced - there is no problem here. Also no fragmentation

Why is the upload speed slowing down?

Can someone help with a solution?

Software ver=7.3.1.1-83

[marce1000]

 - Check established MTU on the tunnel , if it seems low try if you can tweak it , 

 M.

[jararaca]

This problem is not in MTU!

[marce1000]

 - Good to know!           Have you checked the current value of the MTU ?

 M.

[jararaca]

It's ipsec-l2l, it doesn't have an MTU. I tried changing the MSS size, nothing changes.

Configuration Output->

Connection Name: *.*.*.*

Type: Policy Based

VPN Access Interfaces: outside (*.*.*.*)
Network: *.*.*.*

Peer IP Address: *.*.*.*
Peer Network: Network*.*.*.*

IKE Version 2
IKE Policy: aes-sha-sha-21,19,20
IPSec Proposal: aes-sha-1
Authentication Type: Pre-shared Manual Key

IKE Version 1: Disabled

IPSec Settings
Lifetime Duration: 28800 seconds
Lifetime Size: 4608000 kilobytes

Additional Options
NAT Exempt: —

Diffie-Hellman Group: Null (not selected)

[jararaca]

Hi!

No working solution has been proposed. And no answers were given. Anyone else have some advice to share?

[marce1000]

  - Note that  the community is populated by customers and (Cisco) product users and it based on best effort (only) ; for official support in need for business solutions consider : https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html

 M.