Sonicwall 2040 IPS is slowing down connection

Posted on 2009-04-23
Last Modified: 2013-11-29
I have a Sonicwall 2040 and we recently upgraded our connection to 20/2.  Unfortunately it runs consistently at 8.6 down - before the upgrade and after.  I bypassed the firewall and had excellent connection speeds, so after troubleshooting further it appears the intrusion protection settings on the 2040 are the issue.  I'm not keen on turning off IPS, are there any recommendations for an alternate resolution?  We have a private server that is accessed by a few employees, but they do not have static IP addresses.

Any thoughts you have on getting what we pay for on the internet speed without compromising our security would be much appreciated.  Thanks!!

Hello?  Is this thing on?  Anyone?
Question by:bunnyzilla
    LVL 16

    Accepted Solution

    The problem with any deep-packet-inspection service is it HAS to spend more time over each packet than a plain packet-filter.

    Sadly, the first generation of Sonicwalls to include DPI filters (IDP, Gateway A/V, etc.) didn't really have the CPU grunt to do it justice.

    Even on the current generation, which have much faster CPUs , you'll note ( ) that they explicitly quote thoughput figures with just "stateful inspection" or full DPI, broken down by module.

    I think it's fair to say you're getting what yuo can expect from the older model.  If you really need IDP, then consider upgrading to a newer model - familiar system but much faster CPU - and you can probably take advantage of the current "Secure Upgrade" program (ask your Sonicwall Partner) to get a discount against the older box.


    Author Closing Comment

    Thank you - that all makes perfect sense!

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    Envision that you are chipping away at another e-business site with a team of pundit developers and designers. Everything seems, by all accounts, to be going easily.
    Password hashing is better than message digests or encryption, and you should be using it instead of message digests or encryption.  Find out why and how in this article, which supplements the original article on PHP Client Registration, Login, Logo…
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now