Help - Search - Members
Full Version: Slow VPN Access & Disconnects
Kaspersky Lab Forum > English User Forum > Protection for Small and Medium Businesses
Cameron S.
Greetings!

I am currently using KAV/KIS 6.0.3.837 on a Small Business network of approximately 25 users. The issue I am experiencing is that our heavy company users utilize VPN and they are complaining of excruciatingly slow performance as well as disconnects when connected to our corporate office's VPN. We do not have a specialized VPN client or firewall, and are using the standard Windows VPN client.

Users that are experiencing the issue are on Vista as well as Windows XP w/SP3. Note that they can connect to their VPN and maintain their connection for periods of time, and even access files/e-mail. However, the performance is degraded to a point where productivity becomes a moot point.

I have tried disabling and removing the extra components, leaving only the Anti-Virus features enabled. I have also tried changing the default drives to scan in an attempt to see if it is attempting to scan their mapped drives once VPN connectivity is up. I have tried disabling the NDIS filter and still no luck. Performance is re-instated after completely uninstalling KIS/KAV, so the issue most definitely stems from Kaspersky.

Has anyone run into this issue before, if so, was there a resolution short of a complete uninstall or choosing a different Anti-Virus product. Is there a newer version or hot fix that resolves this issue?

Thank You in advance!
Cameron
Tybilly
Hello and Welcome,

You can try this:
1. Remove KAV 6 WKS using the cleaner utility: http://support.kaspersky.com/faq/?qid=208279463
2. Reinstall KAV 6 WKS without NDIS filter: http://support.kaspersky.com/faq/?qid=208279633

If you're still experiencing this issue, try to enable compatibility mode (under "Settings" > "Services" > check "Compatibility mode").
Cameron S.
QUOTE(Tybilly @ 9.04.2009 13:13) *
Hello and Welcome,

You can try this:
1. Remove KAV 6 WKS using the cleaner utility: http://support.kaspersky.com/faq/?qid=208279463
2. Reinstall KAV 6 WKS without NDIS filter: http://support.kaspersky.com/faq/?qid=208279633

If you're still experiencing this issue, try to enable compatibility mode (under "Settings" > "Services" > check "Compatibility mode").


I have tried disabling the NDIS filter, but I will try installing it without the NDIS altogether, but I suspect the same issues will occur. I also checked the Compatibility Mode as well, forgot to mention that in my original post. I will attempt scrubbing the install and installing again without the NDIS filter and see what happens. In the interim, are there any other suggestions?

Thanks,
Cameron
RobertFranz
QUOTE(Cameron S. @ 9.04.2009 13:07) *
I have tried disabling the NDIS filter, but I will try installing it without the NDIS altogether, but I suspect the same issues will occur. I also checked the Compatibility Mode as well, forgot to mention that in my original post. I will attempt scrubbing the install and installing again without the NDIS filter and see what happens. In the interim, are there any other suggestions?

Thanks,
Cameron


I've had very mixed results with the MS vpn client - and for that matter, with the Linksys vpn client as well.

For general office usage, I have two rv042's in a router-to-router vpn.

This would be my suggestion for anyone who needs to go any significant data transfer via vpn.

Also, is anyone using Remote Desktop?

If so, it's best to get that OFF the vpn, unless you're working under an NSA contract.

RDP has sufficient encryption that iirc, it's never been broken, and having multiple wrappers in inefficient.

I realize your immediate issue is geeting Kaspersky to ignore your vpn pipe - this is intended as food for thought for later smile.gif




jlucas
When you say performance is degraded, what do you mean? network throughput, application performance on the client or the server side, etc..

If you have an application that runs on the client but access a server over the VPN try excluding the application from KAV scans and see if the improves things.

If you use MSRDP, try setting the MSRDP desktop resolution to 256 colors, no need for 32bit color on a RDP session.

with disconnects I usually check the network first then the firewall logs, but the area I'm in (silicon valley) has known issues with level3 once in a while. Network slowness in route, high bandwidth utilization, or excessive dropped packets in route cause a few problems, as will a mismatch in VPN settings such as short SA lifetime.

Try running another VPN client besides the MS one, depending on your firewall vendor usually they have a client available. I have 25 clients all running KAV workstation 6.0.3.837 hotfix i and Netscreen (Juniper) VPN Client (they rebrand a VPN client from safenet) that connect to our network using a variety of providers on the client side (cable, DSL, T1, Sprint EVDO, etc..) with no complaints except when once and a while the Sprint EVDO network has a little trouble.

hope that helps.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.