2500 users on a 12/3mbps Satellite Internet Connection... How to Improve speed?

Posted on 2015-02-05
Last Modified: 2015-02-21
Hi All,

As the Title suggests, we have a lot of Internet issues.
We have 2500 users who are accessing an uncapped 12mbps down / 3 mbps up Satellite connection.
This is a corporate environment

Unsurprisingly, we always max out the connection and have some unhappy users complaining that the Internet doesn't work...

Purchasing more internet is not an option, as the Satellite Links are incredibly expensive.

So we are looking at possible ways to ensure that the Internet link is used the most effectively.
More than happy to buy kit, even expensive kit, as the Return On Investment for anything that reduces the need for more Internet costs would be easy to justify.

Our current environment uses an Cisco ASA 5540 as the Firewall and we have a  Cymphonix Network Composer (now owned by untangle) as the Web Filter and basic traffic shaping.

This works, but im sure there must be something more out there that will allow us to better manage the Internet traffic so that we can ensure the best possible internet experience for our users. And give better reporting than the Cymphonix.

Also, VERY IMPORTANT, is that the level of skillsets with the IT area for maintenance of the devices is low, so we will need something that is reasonably easy to maintain (again, happy to pay for that!) and is easy to work with.

Does anyone have suggestions for:

Traffic Shaping  (with differing rules for different AD Groups, ie Streaming media ok for some, restricted for others, blocked entirely for some, volume based shaping would be good too ie. User gets 200mb of Streaming Media or Internet as a whole unrestricted, as soon as they go over that they are shaped right down to something small)

Prioritising of Traffic (able to prioritise certain traffic, websites or AD users so their internet takes precedence, ie for Video conferencing or Online Exams)
Web Filtering (with differing rules for different AD Groups, HTTPS filtering as well)

Block of unwanted traffic (time based, ie P2P blocked always but Online backups, Dropbox etc, available at night)

Comprehensive Monitoring and Reporting. (Be able to identify users and PCs clearly, drill down options on the traffic)

We would probably prefer a commercial option, even up to the ISP quality equipment, to ensure that we can do this right.
We have considered devices like  Procera  Packet Logic
But would like to get an understanding of what else is out there.

Thank you
Question by:HBS-Mach
  • 6
  • 3

Accepted Solution

Joey Yung earned 500 total points
ID: 40592748
You might consider for BlueCoat proxy solution, which can meet your requirement and resolve the bandwidth bottleneck issue.

Author Comment

ID: 40592986
Thanks Joey Yung, I will take a look.
Are you using it yourself?
Feedback on its effectiveness would also be helpful
LVL 14

Expert Comment

ID: 40593120
I think you just don't have enough bandwidth for 2500 users.  I have 90 users on 25 down and 7 up and that chugs at times.  Consider what happens as well when everyone's computer wants to update on patch Tuesday or Adobe issues another of their numerous updates.  Is there any way you can get more upload bandwidth?  That might help somewhat as I can only imagine how much data is squirting up that 3mb uplink with 2500 users.  Internet traffic is 2-way.  Each computer has to send a request before it can get a web page and a clogged uplink will really slow everything down.

Author Comment

ID: 40593259
Hi Johnny
Unfortunately buying more bandwidth isn't an option. This is a island in the middle of the pacific. Satellite costs are huge.
We use WSUS for patch Tuesday and System Centre for other updates to reduce traffic.
We are looking for something that will hopefully make it a little better... But it will always be slow, we understand that.
A little better is better than nothing :-)

Author Comment

ID: 40597410
Does anyone use Procera Packet Logic or a BlueCoat?
Promote certifications in your email signature

Has your company recently won an award or achieved a certification? They'll no doubt want to show it off. Email signature images used to promote certifications & awards can instantly establish credibility with a recipient and provide you with numerous benefits.


Expert Comment

by:Joey Yung
ID: 40597759
I'm not the end user, and I was help my customer to deploy before. End up the customer is satisfied with the product, and BlueCoat is the market leading brand.

Expert Comment

by:Joey Yung
ID: 40597765
I'm not much memory of this project, but I remember their scope is around 1500 users with 15Mb WAN bandwidth.

Author Comment

ID: 40599472
thanks Joey Yung. That scope sounds about right for me.

Assisted Solution

HBS-Mach earned 0 total points
ID: 40613016
I will close this question with points awarded to Joey Yung for suggesting BlueCoat and we will also look at Procera Packet Logic.

Author Closing Comment

ID: 40622814
In the end I didn't get as complete an answer as I hoped, but this at least gives me a couple of areas to look at.

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
Are you using email marketing software? If not, you're missing out on effortless marketing and the reaching of desired conversion rates through email marketing software.
This tutorial gives a high-level tour of the interface of Marketo (a marketing automation tool to help businesses track and engage prospective customers and drive them to purchase). You will see the main areas including Marketing Activities, Design …
A simple description of email encryption using a secure portal service. This is one of the choices offered by The Email Laundry for email encryption. The other choices are pdf encryption which creates an encrypted pdf of your email and any attachmen…

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now