topic Re: Speed Test through Palo Alto pair in General Topics

Speed Test through Palo Alto pair

leole — Tue, 30 Mar 2010 16:55:28 GMT

Hello group,

We are in the process to set up and replace the current firewall with PA-4020 pairs . During pre-test, one thing came up. Using several Speed Test sites, the results are not what we expected, particularly the UPLOAD speeds are far off .

It is a big HELP if the group let us know what are your Speed Test results comparing to the expected.

Our set up is L3 ports with everything in AUTO with almost no rules for now, no User ID agents,

Thanks in advance.

Leo Le

Re: Speed Test through Palo Alto pair

leole — Wed, 31 Mar 2010 16:04:09 GMT

Hello group,

Thought you would like to know.

After further testing, we would like to clarify about the speed issue. Only the PA with ports set in VWire and it sat behind another firewall .

The speed tests performed in front and behind one of our Production PA pairs showed that no performance degradation at all

The Palo Alto support already took a look into this issue. Case number 00012949.

Leo Le

Re: Speed Test through Palo Alto pair

mikand — Wed, 31 Mar 2010 18:53:06 GMT

So when running the PAN in VWire there were a speed degradation but not when running in L3 mode?

Re: Speed Test through Palo Alto pair

odin — Fri, 02 Apr 2010 16:20:36 GMT

How were you doing the speed tests? What about results for the L3 configuration?

Re: Speed Test through Palo Alto pair

migration — Wed, 03 Nov 2010 17:14:38 GMT

Could you clarify us how you resolved the issue?

Thanks

Re: Speed Test through Palo Alto pair

markjx — Thu, 04 Nov 2010 00:32:52 GMT

I'd like to add a "me too" to this conversation.

We have a 4020 (not an HA pair, just a single) sitting behind a firewall pair (from another vendor) at our Internet gateway.

Today, for about eight hours, we had issues with slow uploads, or total upload blocks, to those Internet speed test sites. "Normal" traffic seemed OK. At about 2pm (local), everything got magically better.

I figured it was just a fluke.

What was the root cause for this?

Re: Speed Test through Palo Alto pair

migration — Fri, 05 Nov 2010 17:37:54 GMT

@markjx:

Hi! Which speedtest sites did you try?

Did you have problem only with speedtest site or even with normal HTTP traffic (upload/download)?

Thanks for your answer.

Re: Speed Test through Palo Alto pair

markjx — Fri, 05 Nov 2010 18:12:00 GMT

It was actually my co-worker, so I'm not sure exactly which URL's he went to. I do know that regular HTTP traffic seemed OK.

And, the "upload" speed reported by the two (or three?) site he went to wasn't just slow. It was actually zero.