If you notice that there is a reduced throughput for a Cato Socket or VPN Client, one possible cause is a third-party firewall with UDP Flooding protection. This protection can limit traffic that is sent over the Cato DTLS tunnels and passes through the firewall. Often the UDP Flooding protection is enabled by default on many firewalls.
In these kind of cases, Cato Networks recommends disabling the UDP Flooding protection in your firewall. You can run a speed test and compare the impact of this protection on your network throughput.