Re: [FW-1] VPN is painfully slow to internal LAN

[Chris H <cghoerichs@FW1-NOSPAMYAHOO.COM>]

Have any domain objects?  Look in the policy editor
and look for anything with the crown.  It is the king
of killing performance.  Even if it isn't in your
rules you push to your FWs.

Chris
--- Christopher Ferraro <cferraro@HUBBARDONE.COM>
wrote:
> I've got a NT 4.0 sp 5, checkpoint 4.0 sp7 box VPN'd
> with a win 2k sp2,
> checkpoint 2k sp 4 box.
>
> I am using IKE encryption.
>
> Both boxes are dell servers, the remote office has a
> PE 1450 SC (900 MHZ,
> 512 RAM) and the central office has a PE 2400 (500
> MHz, 256 RAM)
>
> Ping times range from 50 ms to 500ms, with an
> average of approximately 217
> ms, in either direction.
>
> A traceroute in either direction shows no problems,
> nor does access from the
> central office to the remote office.
>
> Access from the remote office to the central office
> is extremely slow.
>
> The central office has a full t1 to the internet as
> does the remote office.
> Bandwidth utilization is not a factor in either
> space.
>
> Are there any configuration changes I can make to
> the VPN to speed things up
> ?
>
> Any suggestions are much appreciated.
>
> Thanks in advance,
>
> CF
>
> Christopher A. Ferraro
> Senior Systems Engineer
> Hubbard One
> www.hubbardone.com
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================


__________________________________________________
Do You Yahoo!?
Got something to say? Say it better with Yahoo! Video Mail
http://mail.yahoo.com

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================