Max speed through an ESP VPN connection

[netdefilr2]

What are some max speeds you see through your ESP VPN connections?

I'm finding 30-40Mbps with Symantec Endpoint Protection installed and 60-82Mbps with it uninstalled. Exclusions were added to Symantec for Pulse Secure Client but it made no difference. Should we be able to get higher than 82Mbps on a psa7000c with 10G connections?

[zanyterp]

No, we would not expect it to be more than that. I am not aware of any limitation specific to SEP; however, you can open a case with our support team to check if there is anything we can do to work around that.

Have you disabled the Juniper Networks Service/driver on all adapters? 

Does SEP have a network driver that you can remove from the Pulse adapter and test?

[netdefilr2]

We did get a case opened about this but we didnt see much progress as it was towards the end of the year.

I believe in most of the test cases, the users had the Juniper Network Driver unchecked from all the interfaces (Ethernet, Pulse Secure, Wifi)

Another test was taking our image without Symantec and putting it on a laptop but the speeds did not improve.

Most speed tests for downloads were 12-35~Mbps where their Internet connection could support much more (100Mbps+) I unfortunately live rurally and don't have the speeds to test myself.

Global Protect was tested along side this and they were seeing >100Mbps download speeds.

I think its possible to reach ~85Mbps with Pulse Secure if we determine the culprit thats limiting the bandwidth.

Regarding SEP driver I don't see anything enabled for this.

Here's what I see under Ethernet, Wifi and Pulse Secure interface:

(Enabled) Client for Microsoft Networks

(Enabled) File and Printer Sharing for Microsoft Networks

(Enabled) Npcap Packet Driver (NPCAP)

(Enabled) QoS Packet Scheduler

(disabled) Juniper Network Service

(Enabled) Internet Protocol Version 4 (TCP/IPv4)

(disabled) Microsoft Network Adapter Multiplexor Protocol

(Enabled) Microsoft LLDP Protocol Driver

(Enabled) Internet Protocol Version 6 (TCP/IPv6)

(Enabled) Link-Layer Topology Discovery Responder

(Enabled) Link-Layer Topology Discovery Mapper I/O Driver

[DerFalk]

Same here, just that slow connection

[DerFalk]

Same herer, just that slow connection

[elevator4]

Similar story here.  Typically cannot get much more than 20-25 Mbps on a Windows client with a 200Mbps ISP link via an ESP tunnel.  Interesting comparison though is that a Mac endpoint on same ISP link gets MUCH better, approx 120 - 150Mbps.

Actively working with Pulse Support on identifying what performance gains on Windows are possible.

[pulse1]

Any progress on this case.

[freed96]

Would love an update as well. Experiencing the same issues.

[sthon]

it depends on the PCS Hardware and software you are using.
We have PSA7000 and starting from OS9.1R11 I have seen some ESP connections over 100Mbit/sec.
There was something changed in the code, for more bandwith per connection ( cant really remember what it is)
Before OS9.1R11 we had seen max speed around 20-30Mbit/sec.

[Robert_G]

Similar story here.

PSA-7000c and PSA5000-V

Version: 9.1R9 (build 9189)on server side

Version: 9.1R9 (biuld 4983)on the client side

We have the same issue like mentioned here, we cannot get much more than 20-30 Mbps with TCP traffic on a Windows client with a 150Mbps ISP link via an ESP tunnel. 

UDP traffic is ok.

@sthon 

Can you provide us more info, are you sure that with newer version OS9.1R11 we will get the higher speed with ESP connection around 100mbit/s ?

If yes what has been changed in 

OS9.1R11? I don't see any info realted to that in release notes...

Thanks in advance for help!