DrayTek UK Users' Community Forum

Help, Advice and Solutions from DrayTek Users

Slow SSL VPN on new 3910?

  • trevc80
  • Topic Author
  • User
  • User
More
25 Mar 2020 20:55 #1 by trevc80
Slow SSL VPN on new 3910? was created by trevc80
The 3910 is on firmware 3.9.2

Dial-in SSL performance is terrible, <1Mb/sec transfer speeds. Internet connection is a 100Mb leased line. If we switch to PPTP VPN for the same VPN user, it flies at full speed - fantastic! Switch back to SSL, and terrible again. We need to use SSL though, PPTP will not pass their PCI Compliance.

IPSEC site-to-site VPNs are also flying along fine.

Have tried changing SSL port to 4433 to ensure nothing else on 443. Management port is on 4434. Tried everything on 443 and still the same. Rebooting in between each time. No bandwidth management – all disabled for now.

We are using Smart VPN Client 5.30 and have tried from multiple PCs.

The 2926 was fine with just 1x SSL user connected, same firewall rules and internet connection etc.

I know it's a new device, just wondered if anyone else had experienced the same or got any clues as to why it is happening?

Please Log in or Create an account to join the conversation.

  • hornbyp
  • User
  • User
More
26 Mar 2020 01:17 #2 by hornbyp
Replied by hornbyp on topic Re: Slow SSL VPN on new 3910?

trevc80 wrote:
Dial-in SSL performance is terrible, <1Mb/sec transfer speeds. Internet connection is a 100Mb leased line.


According to the specs. sheet , the 3910's SSL VPN throughput is 1Gbps! So in theory your limiting factor is your leased line.Yet, you're not getting close to that, so there is a definitely a case for Draytek to answer!

and he wrote: If we switch to PPTP VPN for the same VPN user, it flies at full speed - fantastic! Switch back to SSL, and terrible again. We need to use SSL though, PPTP will not pass their PCI Compliance.
IPSEC site-to-site VPNs are also flying along fine.


I'd take their point about PPTP, but isn't it an option to use one of the other protocols, instead of SSL?

Please Log in or Create an account to join the conversation.