VPN slowness on ASA 5520

[kunz12]

Hi Guys -

I have a weird situation. I have an ASA 5520 that is our VPN end point for staff connecting remotely using the Cisco VPN client. ASA 5520 is connecting to one of the interfaces on the ASA 5510 (firewall). 5510 is connected to the inside network.

Most staff members VPN in from home using a wireless connection on a LinkSys router (or a Netgear). Access Point has either WEP or WPA configured for encryption. When they try to open files on a network drive (mapped to a file server in the office) when connected thru the VPN, opening files is very slow. However when WEP or WPA encryption settings are removed from the access point, opening files on the same network drive is much faster. We've noticed this behavior for many people.

Any ideas on how to resolve this? Of course, it is not practical for us to ask staff members to remove encryption settings from their home access points.

Any help would be appreciated.

 

[desperado618]

I dont know exactly but this sounds like NAT-T is the culprit.

http://www.NetLeets.com

IT Security news and information
In plain English

 

[kunz12]

Can you elaborate? Not sure how this could be related to NAT-T..

 

[desperado618]

May not be related but I had a similar issue with SoftRemote.
When split tunneling was disabled, and any wireless authentication was used, and the WAP also acted as the ISP end point (cable modem/dsl), and Nat T was used, I had your situation.
If split tunneling was turned off, or Nat-t was not used, performance was not impacted.

http://www.NetLeets.com

IT Security news and information
In plain English