ScreenOS Firewalls (NOT SRX)
ScreenOS Firewalls (NOT SRX)

Internet slow through SSG20

‎01-19-2011 06:50 AM

Hi Team,


We have an SSG20 running 6.2.0r5.0 with the default security settings (No UTM enabled). Have created 2 zones trust & untrust with a policy permitting any to any. LAN interface is in NAT mode and WAN in Route mode.


Now users connecting to internet report terribe slowness. Dont have any issues on their outlook client. It's the websites that take time to load and at occassions doesn't come up. We have a 2 Mb broadband ISP connection, when connected directly to ISP link from laptop, the web page loads fast.


From the LAN through SSG, except Google (even searches are fast) but once you click on any link, its doesnt load. We have an external DNS (both configured on SSG and user desktops).


Strongly suspect on the DNS resolution, should we enable the DNS ALG on the SSG? or Is there any other settings that can cause this slowness. Will post the Debug output shortly.


Please help.






ScreenOS Firewalls (NOT SRX)

Re: Internet slow through SSG20

‎01-20-2011 12:31 AM

Managed to solve it. The default route was pointed to eth0/0 interface, after adding the service provider router IP for that interface, speed is good.