Zyxel 500 H VPN Speed

Tomasz_Wysocki0
Tomasz_Wysocki0 Posts: 3  Freshman Member
First Comment Friend Collector
in USG FLEX H Series

Hello everyone,

My company bought zyxel 500H from distiributor which my distributor adverttised it as device with safety, high - performance vpn (don't have any experience with Zyxel, earlier we have Cisco, HPE and TP-link solution). Company has bandtwith 1Gbit/s, infrastructure speed and data server output speed >1Gbit/s, vpn client WIndows 11 PC - 300MBit/s (all real, measured values).

So I made test configuration for SSL VPN for one user (home to company VPN connection )but I have very poor speed from 300kBit to 4(mainly ~1, sometimes 8 peak for while)MBit during copying one 4GByte file. So I decided to do second configuration IPsec/IKEv2 Remote access as following links:

https://support.zyxel.eu/hc/en-us/articles/16561699508242-USG-FLEX-H-Series-Firewall-How-to-Configure-IKEv2-Remote-Access-VPN-with-Apple-MAC-OS-Sonoma-native-VPN-client

and situation looks similar - same speed.

I found on zyxel community that some people have similar problem, like following:

https://community.zyxel.com/en/discussion/22596/usg-flex-500h-openvpn-very-slow

I tried for few minutes but without any significant difference.

or:

https://community.zyxel.com/en/discussion/27323/wfh-vpn-impacted-after-updating-100h-to-1-30-abxf-1

and I don't know what I should even thinking… Is there some problem with newest firmware 1.30 which we have on our new device or what?

What VPN speed you achieve? On what settings? How this is even possibility to have 1000 times lower mean speed that ISP which is "only" 50% of maximum performance from specification of 500H? My boss says to return this device as non-compliant with the contract…but maybe somebody found the solution of ultra low performance vpn. Distributor says that he already build many infrastructures based on flex 500 device and those works great…

Please help!

Tom

All Replies

  • Zyxel_Melen
    Zyxel_Melen Posts: 2,567  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    edited December 18

    Hi @Tomasz_Wysocki0,

    Could you help to disable IPS to test the transmit speed again?

    image.png

    In the forum post you quoted, WFH VPN impacted after updating 100H to 1.30(ABXF.1), disabling the IPS can improve the transmit speed.

    Also, may I know if the copy file is from the server or to the server? What protocol was it? FTP/SMB or?

    Zyxel Melen


  • Tomasz_Wysocki0
    Tomasz_Wysocki0 Posts: 3  Freshman Member
    First Comment Friend Collector

    Hi @Zyxel_Melen,
    sorry for delay but in meanwhile I got a patch from support, but unfortunately nothing change after upgrade. Anyway, during week (before upgrade) I made some test about influence security options for VPN copy speed (same copy test as earlier). And after add some users to device and played on/off/on with security option nothing change. But on next day, I checked the copy speed (same test) and now it's around 8MB/s, still poor but not deep as before. The only thing which I done between switching and testing next day is reboot - if I remember right. I didn't do reboot after each switching because device has quite long start time, and device not ask about it - still don't know that is important or not if device shows message: changes applied

    About Your question, I tested speed with IPS enabled/disabled and without any significant changes in copying test, copy speed is the same ~8MB/s. Used protocol: SMB.

    Regards

    Tom

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）