SFTP slow transfer showing incomplete data in logs.

Asmita — Thu, 26 May 2022 06:49:57 GMT

Hello everyone.

I am facing an issue when I transfer files via SFTP and SCP is slow when I introduce Palo alto in the path.

Data path:

Server > Core switch > Palo alto > Fortinet > Internet ( AWS )

Server > Core switch > Fortinet > Internet ( AWS )

Speed with Palo Alto : 70-150KB/s

Speed without Palo Alto : 600 - 700KB/s

I have created a plain firewall rule on top and also disabled server inspection response. but no luck.

I tried to create an app override policy but that is not getting hit.

All I can see in logs is insufficient data with multiple random ports ( ranging from 33500 to 33550 getting allowed and when checking the same using session id , i see very less count of L7 application data received.

Re: SFTP slow transfer showing incomplete data in logs.

BPry — Thu, 26 May 2022 21:10:02 GMT

@Asmita,

Have you checked speed/duplex settings on the interfaces to ensure you don't have a mismatch here? Also what does your application-override entry actually look like?

topic SFTP slow transfer showing incomplete data in logs. in General Topics

SFTP slow transfer showing incomplete data in logs.

Re: SFTP slow transfer showing incomplete data in logs.