Business broadband speed

Sid_F used Ask the Experts™
I have a basic checkpoint firewall running two networks, one side of the network is for business users and they connect across a site to site VPN to TS server.
The other DMZ side of network has students that browse web.The business users are complaining about intermittent TS speeds, if they disconnect the students speed is good I'm told.
I'm trying to identify if this is a capacity issue or something else is happening.
Suggestions welcome as I investigate further thanks
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
I'm unclear why you refer to the student's connection to the internet a "DMZ side".

The first thing that comes to mind is that the checkpoint firewall is dealing with something like virus scanning or web filtering for the students and this is overloading the capabilities of that device.
I would imagine that TS = Terminal Services

If the business network works fine when the student one is disconnected, that does suggest that fmarshall is correct in his deduction that the Checkpoint device is unable to service all the demands made on it when both networks are in use. Virus and spam filtering, and virus scanning are quite CPU intensive, and if they are in operation then that doesn't leave much processor bandwidth for servicing the basic router functions.
Also, if you're using IPSec VPN that can make the appliance CPU quite busy too.


Thanks I think the web filtering might be causing the issue. TS= terminal server thanks

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial