<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Prisma VPN -- NAS download huge files very slow in Next-Generation Firewall Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/next-generation-firewall/prisma-vpn-nas-download-huge-files-very-slow/m-p/1261119#M7084</link>
    <description>&lt;P&gt;Thanks a lot Kiwi, I will update you, what works in our environment.&lt;/P&gt;</description>
    <pubDate>Wed, 05 Aug 2026 18:40:14 GMT</pubDate>
    <dc:creator>krishnarandadath</dc:creator>
    <dc:date>2026-08-05T18:40:14Z</dc:date>
    <item>
      <title>Prisma VPN -- NAS download huge files very slow</title>
      <link>https://live.paloaltonetworks.com/t5/next-generation-firewall/prisma-vpn-nas-download-huge-files-very-slow/m-p/1260957#M7077</link>
      <description>&lt;P&gt;Prisma VPN access -- SMB2 CIFS Files download from NAS dead slow. it takes, 24 to 38 hours for a 250 GB file to download --- any suggestions please.&lt;/P&gt;</description>
      <pubDate>Tue, 04 Aug 2026 17:03:11 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/next-generation-firewall/prisma-vpn-nas-download-huge-files-very-slow/m-p/1260957#M7077</guid>
      <dc:creator>krishnarandadath</dc:creator>
      <dc:date>2026-08-04T17:03:11Z</dc:date>
    </item>
    <item>
      <title>Re: Prisma VPN -- NAS download huge files very slow</title>
      <link>https://live.paloaltonetworks.com/t5/next-generation-firewall/prisma-vpn-nas-download-huge-files-very-slow/m-p/1261089#M7081</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/1129514859"&gt;@krishnarandadath&lt;/a&gt;&amp;nbsp;,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;If you're doing inspection then SMB download is slow by design.&amp;nbsp; Check the following article on why SMB is slow and possible workarounds:&lt;BR /&gt;&lt;STRONG&gt;&lt;A href="https://live.paloaltonetworks.com/t5/community-blogs/why-is-smb-traffic-slow/ba-p/356471" target="_blank"&gt;https://live.paloaltonetworks.com/t5/community-blogs/why-is-smb-traffic-slow/ba-p/356471&lt;/A&gt;&lt;/STRONG&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;DIV class="n6owBd awi2gc" data-copy-service-computed-style="font-family: &amp;quot;Google Sans&amp;quot;, Arial, sans-serif; font-size: 16px; font-weight: 400; margin: 12px 0px 16px; text-decoration: none; border-bottom: 0px rgb(10, 10, 10);" data-processed="true" data-complete="true" data-hveid="CAAICRAA" data-sfc-root="ep" data-sfc-cp=""&gt;&lt;SPAN class="iNqyIf" data-copy-service-computed-style="font-family: &amp;quot;Google Sans&amp;quot;, Arial, sans-serif; font-size: 16px; font-weight: 400; margin: 0px; text-decoration: none; border-bottom: 0px rgb(10, 10, 10);" data-complete="true" data-sfc-root="ep" data-sfc-cp=""&gt;The firewall typically pins the entire SMB session to a single DP (Data Plane) CPU core. That core spikes to 100% capacity trying to do deep packet inspection on every single sequential block of the 250 GB file.&amp;nbsp;&amp;nbsp;&lt;/SPAN&gt;&lt;SPAN class="iNqyIf" data-copy-service-computed-style="font-family: &amp;quot;Google Sans&amp;quot;, Arial, sans-serif; font-size: 16px; font-weight: 400; margin: 0px; text-decoration: none; border-bottom: 0px rgb(10, 10, 10);" aria-owns="action-menu-parent-container" data-complete="true" data-sfc-root="ep" data-sfc-cp=""&gt;As the single CPU core falls behind, the firewall's internal buffers fill up. It starts dropping packets, causing TCP window sizes to collapse. SMB interprets this network congestion by slowing itself down to a crawl to avoid losing data.&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV class="n6owBd awi2gc" data-copy-service-computed-style="font-family: &amp;quot;Google Sans&amp;quot;, Arial, sans-serif; font-size: 16px; font-weight: 400; margin: 12px 0px 16px; text-decoration: none; border-bottom: 0px rgb(10, 10, 10);" data-processed="true" data-complete="true" data-hveid="CAAICRAA" data-sfc-root="ep" data-sfc-cp=""&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV class="n6owBd awi2gc" data-copy-service-computed-style="font-family: &amp;quot;Google Sans&amp;quot;, Arial, sans-serif; font-size: 16px; font-weight: 400; margin: 12px 0px 16px; text-decoration: none; border-bottom: 0px rgb(10, 10, 10);" data-processed="true" data-complete="true" data-hveid="CAAICRAA" data-sfc-root="ep" data-sfc-cp=""&gt;&lt;SPAN class="iNqyIf" data-copy-service-computed-style="font-family: &amp;quot;Google Sans&amp;quot;, Arial, sans-serif; font-size: 16px; font-weight: 400; margin: 0px; text-decoration: none; border-bottom: 0px rgb(10, 10, 10);" aria-owns="action-menu-parent-container" data-complete="true" data-sfc-root="ep" data-sfc-cp=""&gt;&lt;SPAN class="iNqyIf" data-copy-service-computed-style="font-family: &amp;quot;Google Sans&amp;quot;, Arial, sans-serif; font-size: 16px; font-weight: 400; margin: 0px; text-decoration: none; border-bottom: 0px rgb(10, 10, 10);" aria-owns="action-menu-parent-container" data-complete="true" data-sfc-root="ep" data-sfc-cp=""&gt;You can check this using the CLI 'show running resource-monitor':&lt;BR /&gt;&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;STRONG&gt;&lt;A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClXwCAK" target="_blank" rel="noopener"&gt;How to Interpret: show running resource-monitor&lt;/A&gt;&amp;nbsp;&lt;/STRONG&gt;&lt;/DIV&gt;
&lt;DIV class="n6owBd awi2gc" data-copy-service-computed-style="font-family: &amp;quot;Google Sans&amp;quot;, Arial, sans-serif; font-size: 16px; font-weight: 400; margin: 12px 0px 16px; text-decoration: none; border-bottom: 0px rgb(10, 10, 10);" data-processed="true" data-complete="true" data-hveid="CAAICRAA" data-sfc-root="ep" data-sfc-cp=""&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV class="n6owBd awi2gc" data-copy-service-computed-style="font-family: &amp;quot;Google Sans&amp;quot;, Arial, sans-serif; font-size: 16px; font-weight: 400; margin: 12px 0px 16px; text-decoration: none; border-bottom: 0px rgb(10, 10, 10);" data-processed="true" data-complete="true" data-hveid="CAAICRAA" data-sfc-root="ep" data-sfc-cp=""&gt;&lt;SPAN class="iNqyIf" data-copy-service-computed-style="font-family: &amp;quot;Google Sans&amp;quot;, Arial, sans-serif; font-size: 16px; font-weight: 400; margin: 0px; text-decoration: none; border-bottom: 0px rgb(10, 10, 10);" aria-owns="action-menu-parent-container" data-complete="true" data-sfc-root="ep" data-sfc-cp=""&gt;As per the blog I shared above try DSRI or app-override (if possible)&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV class="n6owBd awi2gc" data-copy-service-computed-style="font-family: &amp;quot;Google Sans&amp;quot;, Arial, sans-serif; font-size: 16px; font-weight: 400; margin: 12px 0px 16px; text-decoration: none; border-bottom: 0px rgb(10, 10, 10);" data-processed="true" data-complete="true" data-hveid="CAAICRAA" data-sfc-root="ep" data-sfc-cp=""&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;P&gt;Kind regards,&lt;/P&gt;</description>
      <pubDate>Wed, 05 Aug 2026 10:35:09 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/next-generation-firewall/prisma-vpn-nas-download-huge-files-very-slow/m-p/1261089#M7081</guid>
      <dc:creator>kiwi</dc:creator>
      <dc:date>2026-08-05T10:35:09Z</dc:date>
    </item>
    <item>
      <title>Re: Prisma VPN -- NAS download huge files very slow</title>
      <link>https://live.paloaltonetworks.com/t5/next-generation-firewall/prisma-vpn-nas-download-huge-files-very-slow/m-p/1261119#M7084</link>
      <description>&lt;P&gt;Thanks a lot Kiwi, I will update you, what works in our environment.&lt;/P&gt;</description>
      <pubDate>Wed, 05 Aug 2026 18:40:14 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/next-generation-firewall/prisma-vpn-nas-download-huge-files-very-slow/m-p/1261119#M7084</guid>
      <dc:creator>krishnarandadath</dc:creator>
      <dc:date>2026-08-05T18:40:14Z</dc:date>
    </item>
  </channel>
</rss>

