|
||||||||
Thank you all for your responses. I will look more into this article 899148 soon, it looks interesting. The basic issue is that Watchguard through VPN does not like a MTU size above 1372. Windows Sever starts to have issues when the MTU size gets below 1420. If you are interested I will locate the article. So I asked WatchGuard can I change MTU size. They said yes but it will void the warranty and service contract.(so many reason why that is so wrong) Microsoft gave me a registry hack that allows the server to auto negotiate the MTU size on the fly (no default install does not support this). This helped a little, but it still takes 12 hours to replicate most of the time. I could go on and on but I will not. Aaron -----Original Message----- From: Kristian Shaw [mailto:monowall at wealdclose dot co dot uk] Sent: Tuesday, October 11, 2005 4:47 PM To: m0n0wall at lists dot m0n0 dot ch Subject: Re: [m0n0wall] m0n0wall vs Watchguard Hello, Do you know if the Watchguards are performing application layer filtering as well? Windows 2003 with SP1 uses a slightly different format of RPC that some firewalls will drop: http://support.microsoft.com/kb/899148 Regards, Kris. ----- Original Message ----- From: "Aaron Freeman" <aaronpc at pccreations dot net> To: <m0n0wall at lists dot m0n0 dot ch> Sent: Wednesday, October 12, 2005 12:09 AM Subject: [m0n0wall] m0n0wall vs Watchguard A friend of mine has a bundled T1 and he has replication issue botween two Windows 2003 servers. The sites have the following firewalls, one running FireBox 1000 the other running a soho6. Both Watchguard. When I do a speedtest behind the Watchguard the speeds are consistantly 1.8MB/1.8MB. When I put both location behind a m0n0wall running on a Dell OptiPlex GX150 my average speed is 2.8 MB/2.8MB with no replication issues. I have spoken to both Watchguard and Microsoft and the each point the finger at each other. I have proven that the Watchguard is the problem. How do I prove to my friend that m0n0wall is a valid business solution? Or am I incorrect in my thinking? Thank you for any input possible. Aaron --------------------------------------------------------------------- To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch |