Slow BOVPN between fireboxes, watchguard

Posted on 2009-05-18
Last Modified: 2013-11-16
Hi -

I've recently set up a BOVPN between an Watchguard Firebox X1250e (Site A) and X550e (Site B). Performance between the two sites is very poor now. This is at University, site A has a 100mb connection, site B has a 10mb connection. FTP'ing 100mb dummy file from Site A to Site B runs at 100kb/s which I think is way too slow.

When I do a speed test to the internet from Site B (using DSL reports) I get about 250kb/s for up/down. Site A does 7500kb/s down 1000kb/s up.

Does anyone have ideas for ways to speed up the connection?
Question by:futureman0
  • 2
LVL 32

Expert Comment

ID: 24414494
Slowest speed among devices would determine the overall transfer speed on the tunnel; as you get 250 kbps @ site B; getting 100kbps using VPN, i would say, is a good speed.

When you configure VPN, you configure encryption and this slows down things, higher the encryption-bit lower the speed. With lower strength cipher, the speed would be better, but the security would be less.

Thank you.

Accepted Solution

futureman0 earned 0 total points
ID: 24414711

Well it turns out it was a pretty quick fix. The firebox at Site B needed to have 10mb full duplex set manually on the external interface. Once the change was made, the massive amount of packet loss ended and traffic from Site B to A increased from 100kb/s to 8.5mbits/s :)
LVL 32

Expert Comment

ID: 24420483
Good to know that problem is solved; thank you for the update! :)

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Using Windows 2008 RRAS, I was able to successfully VPN into the network, but I was having problems restricting my test user from accessing certain things on the network.  I used Google in order to try to find out how to stop people from accessing c…
If you use NetMotion Mobility on your PC and plan to upgrade to Windows 10, it may not work unless you take these steps.
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question