I'm happy to report that after a few months of using Sophos UTM hardware appliances, browsing the internet is now fast or should I say user acceptable level.
The fixed was to upgrade the Sophos UTM to 9.205-12. Before the upgrade, I had to disable Sophos web filtering. Now, it works just fine after upgrading to the new software.
A good way to see what's eating up CPU/memory usage is by SSH into the box and using the "top" command. A lot of times it is IPS that is causing the slowdowns. If you don't need IPS to be on globally, in the advanced you can specify what actually should be protected (servers, etc).
ReplyDeleteYeah, we need IPS on. That's the goal of having UTM and all in one box.
DeleteI'm trying to move 100 access lists over from the ASA and Sophos UTM and it will take days with all the services.
I hope Sophos will have a feature to import ACLs or do command line to speed it up.