As everyone has said, unless you have an asymmetric internet connection it’s not normal. Are the bandwidths configured correctly on the MX (SD-WAN page), is the Firepower doing any shaping as the speedtest hits the internet, what about your SP do they do shaping? ... View more

One special note is that L3 firewall rules are stateful - group policy firewall rules are not.  This doesn't usually have an impact unless you have a pair of interfaces on them both with group policy applied and suddenly they can't talk to each other without grief. ... View more