topic Re: PA-410 GUI is very slow over IPsec vpn in Next-Generation Firewall Discussions

PA-410 GUI is very slow over IPsec vpn

VictorJayase — Wed, 05 Oct 2022 06:39:08 GMT

We are deploying new PA-410,450,440 in remote location. From Head office firewall to Remote location there is an IPsec vpn.

When users from HO try to access PA-410 firewall over GUI it took 10 - 15 minutes to load. During this GUI loading data plane interface latency increases for example if i try ping servers in HO location from LAN inside PA-410 normally its 20 ms when Loading firewall GUI it increases to 600 MS . Also firewall If latency increases over vpn while accessing GUI. In local network there is no latency firewall GUI is loading normal.

CPU,MGT plane and CPU plan are below 20 % and there is no issue found in counters as well. We tried restarting web-MGMT server which doesn't help. Also there is no issue with CTD demon.

Tried changing MTU to 1200 and also enabled Jumbo frames . There is no error with encap in counters as well.

Re: PA-410 GUI is very slow over IPsec vpn

S.Cantwell — Fri, 07 Oct 2022 15:06:00 GMT

This would be a good web case for PANW TAC to see and escalate to their engineering team.

Re: PA-410 GUI is very slow over IPsec vpn

seanroche — Fri, 09 Feb 2024 15:43:37 GMT

I've been having this same issue on all appliances we've deployed over IPSec. When accessing the GUI of 440s/1410s/1420's over a tunnel (palo-palo) the latency is extensive. Working with support, we took pcaps, changed MTU/MSS but never reached a conclusion. The oddity is the issue does not happen when we're logged into Panorama and use that to jump to a managed gateway gui.

Did you ever receive a resolution to this?