- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
Tips for troubleshooting speed and throughput issues on a SonicWall firewall
03/26/2020 
1,061 People found this article helpful
83,016 Views
Description
Troubleshooting throughput Issues. When you test the throughput of your connection with out the SonicWall in the equation you get different results to when it is in the network setup.
Resolution
- Monitoring
If you have the comprehensive security bundle you should be able to see the performance of the CPU's on the SonicWall. On all models you should be able to check the connection Log. Click Investigate in the top navigation menu and click Connection Logs to get an idea of the traffic flowing through the SonicWall.
Hosts with hundreds of connections to the internet would require some investigation. Also, if you are using something like Sonic Analyzer, MRTG or Cacti you should be able to see the CPU utilization as well as network traffic. If the network traffic is high while you aren't running the test, this would explain why you don't get the expected results. If the CPU load is high, this will have a negative impact on the throughput of the SonicWall. - Turn off unnecessary services on the SonicWall
Each security service that you turn on will inspect traffic that passes through the SonicWall. This in turn places a load on the CPU which will, in turn, have a negative impact on the throughput.
Things to check are
(a) Stop the packet monitor. Click Investigate in the top navigation menu and click Packet Monitor.
(b) Set the logging level to informational. Click Manage in the top navigation menu. Click Log Settings | Base Setup.
(c) While in logging, set the Name Resolution to none. Click Manage in the top navigation menu and Click Log Settings | Name Resolution.
(e) Check that there are no unnecessary NAT policies .Click Manage in the top navigation menu. Click Rules | NAT Policies.
(d) Check that there are no unnecessary firewall rules . Click Manage in the top navigation menu. Click Rules | Access Rules. - Set the Link Speed Manually
Rather than let the SonicWall Auto-Negotiate the link speed you can try to set it to the best speed that it can handle.
Click Manage in the top navigation menu. Click Network | Interfaces and click the configure button for the WAN interface and then going to the advanced tab. In here you can change the Link Speed from Auto-Negotiate to the highest possible (must also update manual speed on downstream device). - Maximum Security and Performance Optimized settings under Security Services settings
You can "dial down" the security services to make them less paranoid and not as CPU intensive. Click Manage in te top navigation menu. Click Security Services | Base Setup . Down that page under the Security Services Settings Heading there is a drop down that lets you choose between Maximum Security and Performance Optimized. - Change the Maximum Transmission Unit (MTU) Size on the WAN interface
This only really applies when you are connection via PPPoE via the WAN side of the SonicWall but it may apply to other similar situations. Before you modify this setting, you will need to find the maximum size that is supported by your ISP. Your ISP may be able to furnish you with this information or you can follow this guide to find it.
Once you have the MTU size you can change the MTU for the WAN interface. Click Manage in the top navigation menu. Click Network | Interfaces click on the configure button for the WAN interface and then Advanced. Some of the more common sizes are 1492, 1474, 1468. - Check the specifications of the SonicWall
You may need to check if the SonicWall is certified to carry the throughput from your network or if it can match the throughput of your internet connection. You might also consider moving some of the services from the SonicWall to dedicated devices.
EXAMPLE: you could move the email scanning to a dedicated Email Security Appliance.
Related Articles
- All associated wildcard FQDN IP addresses do not display in the web browser
- How to Re-Install The Junk Store
- SonicWall NSv Series FAQ
Categories
- Firewalls > NSa Series > Networking
- Firewalls > NSv Series > Networking
- Firewalls > TZ Series > Networking
YES
NO