How To Disable TCP-MSS (Minimum Segment Size) Adjust for VPN Traffic

Description

SonicWall allow users to change the default MSS for VPN traffic with enabling the option do not adjust TCP MSS option for VPN traffic in the diag page, then MSS should be determined by the end points in the TCP three-way handshake. 

Resolution

  1. Get the Hidden Diag page:

Log in to SonicWall, and instead of "main.html" use "diag.html" (for example when the device has an IP address 192.168.1.1 go to https://192.168.1.1/diag.html).

Image

  1. Then click on "Internal Settings" and scroll down to VPN settings.

Image 

       3: Check Do not adjust TCP-MSS (Minimum Segment Size) option for VPN traffic.

Image

  1. Click Accept at the top of the page and click close.

Related Articles

  • How to find out the CFS rating of a website?
    Read More
  • Supported Storage Modules on SonicWall Firewalls running SonicOS/X 7 and above
    Read More
  • TZ シリーズのエラー メッセージ:「 高可用性は無線と一緒に使用できません」
    Read More
not finding your answers?