topic Re: Issu Connection Internet in GlobalProtect Discussions

Issu Connection Internet

Sobbirin — Thu, 30 Nov 2023 03:58:58 GMT

In Palo Alto PA-220

We implemented a GlobalProtect VPN setup and a Palo Alto version 10 firmware upgrade
After one month of implementing GP and upgrading PAN OS Version 10, our internet connection was slow
Internet traffic is always high
High CPU Device Load
Is this problem caused by:
GlobalProtect VPN implementation
Upgrade firmware

Please get information from all your colleagues

Re: Issu Connection Internet

reaper — Thu, 30 Nov 2023 13:54:32 GMT

it may be related to how you're using your device

what is the output of `show session info`, does the number of active sessions look high, is the packets per second exceptionally high?

since this is a pa-220, are you making heavy use of ssl decryption or QoS?

did you oimplement GlobalProtect using IPSec or ssl? (IPSec is faster and causes less load)

Re: Issu Connection Internet

Sobbirin — Fri, 01 Dec 2023 16:09:22 GMT

On palo alto no SSL or QOS is used
just blocking filtering and applying global protect using IPSec