Slow Preferential Traffic

[Huain]

Hi everyone

I have this issue since we switched to Meraki from Fortigate, we have a bunch of users who have to connect through a VPN Client, first we had complains of slow response and disconnections, then we added the target IP addresses to the "SD-WAN & traffic shaping"/"Flow Preferences" and "SD-WAN & traffic shaping"/"Traffic shaping rules" and what I have achieved was to avoid desconection but not the slowness, I would guess that the AMP could be the culprit but I don't see how prevent the AMP check for this particular traffic since it is for IP Address and not through URL.

Thanks in advance

[DarrenOC]

Hi @Huain , are you able to schedule in an outage to test disabling AMP and see if this resolves the issue?  If this works, re-enable AMP and contact Meraki support for assistance.

I believe I had a customer with a similar issue and they added the url or IP to the whitelist for AMP

[Huain]

But it can only be done by URL and I only have the target IP Address, do you think Cisco could help with that?

[DarrenOC]

Are you able to define via URL at all as this is the only supported way?

Are you running Prevention or Detection? Maybe also try changing to Detection to see if this helps.

[Huain]

Well, It accepted the IP Address (at least let me save it), I will be monitoring

[DarrenOC]

🤞