SSTP time to establish the connection: How long is it for you?

Im curious how long it takes for your Clients to connect via SSTP.

We have a Server 2012 with RRAS installed. PPTP is not an option, so we tested IKEv2 and SSTP.

Dialing in via IKEv2 (Windows 8 and Windows 7) happens within the blink of an eye. Unfortunately IKEv2 has some drawbacks for us and SSTP seems to be the better way, so we also tested SSTP.

But with SSTP the time until a connection is established can take from 10-30 seconds, which is pretty long compared to IKEv2. So I wonder if this is normal for the SSTP handshake or if theres something I could look into.

To add some more background Information: We also run Direct Access on separate Servers and use our own PKI for the Certificates. DA works like a charm and of course our CRL Servers and OCSP are available also from the outside.

June 13th, 2013 9:43am

Hi,

Thank you for the post.

As far as I understand, it is normal that SSTP connection attempt will take more time than PPTP VPN connection. Because SSL provides transport-level security with enhanced key negotiation, encryption, and integrity checking, there are may be something delay with them.

Regards,

Free Windows Admin Tool Kit Click here and download it now
June 17th, 2013 11:13am

Thank you very much for your reply. I assumed that a connection with a "proper" encryption can take longer than PPTP, which we want to get rid of (I think its clear why :-) ).

I just assumed that IKEv2 and SSTP both use sophisticated encryption and I wondered why IKEv2 is so much faster. If its normal for SSTP to take 10-30 seconds to establish a connection, then its OK for me. I was just searching for hints if I have a problem here or if this is normal. The Users are complaining of course, because theyre used to the faster connection times of PPTP and IKEv2.

June 17th, 2013 11:53am

I wonder if nobody is using SSTP. Id really like to hear from others how long SSTP takes compared to IKEv2. Both use encryption, but IKEv2 is established within a second or so, whereas SSTP takes up to 30 seconds for some of our Users. I would really like to improve the connection times if I can optimize my installation. But if up to 30 seconds is normal, theres no need to invest more time in this and we can close this case.

Thank you.

Free Windows Admin Tool Kit Click here and download it now
July 1st, 2013 10:04am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics