[ previous ] [ next ] [ threads ]
 From:  "Aaron Freeman" <aaronpc at pccreations dot net>
 To:  <m0n0wall at lists dot m0n0 dot ch>
 Subject:  RE: [m0n0wall] m0n0wall vs Watchguard
 Date:  Tue, 11 Oct 2005 18:20:22 -0700
Thank you all for your responses.

I will look more into this article 899148 soon, it looks interesting.

The basic issue is that Watchguard through VPN does not like a MTU size
above 1372. Windows Sever starts to have issues when the MTU size gets
below 1420. If you are interested I will locate the article.

So I asked WatchGuard can I change MTU size. They said yes but it will
void the warranty and service contract.(so many reason why that is so

Microsoft gave me a registry hack that allows the server to auto
negotiate the MTU size on the fly (no default install does not support
this). This helped a little, but it still takes 12 hours to replicate
most of the time. I could go on and on but I will not.


-----Original Message-----
From: Kristian Shaw [mailto:monowall at wealdclose dot co dot uk] 
Sent: Tuesday, October 11, 2005 4:47 PM
To: m0n0wall at lists dot m0n0 dot ch
Subject: Re: [m0n0wall] m0n0wall vs Watchguard


Do you know if the Watchguards are performing application layer
filtering as well?

Windows 2003 with SP1 uses a slightly different format of RPC that some
firewalls will drop:




----- Original Message -----
From: "Aaron Freeman" <aaronpc at pccreations dot net>
To: <m0n0wall at lists dot m0n0 dot ch>
Sent: Wednesday, October 12, 2005 12:09 AM
Subject: [m0n0wall] m0n0wall vs Watchguard

A friend of mine has a bundled T1 and he has replication issue botween
Windows 2003 servers. The sites have the following firewalls, one
FireBox 1000 the other running a soho6. Both Watchguard.

When I do a speedtest behind the Watchguard the speeds are consistantly 

When I put both location behind a m0n0wall running on a Dell OptiPlex
my average speed is 2.8 MB/2.8MB with no replication issues.

I have spoken to both Watchguard and Microsoft and the each point the
at each other.

I have proven that the Watchguard is the problem. How do I prove to my 
friend that m0n0wall is a valid business solution? Or am I incorrect in

Thank you for any input possible.


To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch