topic Pan(w)achrome - interface speed differences in General Topics

Pan(w)achrome - interface speed differences

craigmueller — Tue, 13 Jan 2015 17:34:18 GMT

Hello,

I just started using Pan(w)achrome, version 0.7.1.5.

So far, it has some useful information.

I am trying to figure out why I have such a difference between my external interface receive rate (1.3+ Gbps) and my internal interface transmit rate (~300 Mbps).

The internal receive and external transmit have the same bitrate (packet rate is off by about 1%).

I understand that inbound I am blocking traffic and that would account for some difference in the rates, but this seems like a big drop.

Is there a way to see a blocked rate of traffic (rule and/or threats) ?

Thanks!

Re: Pan(w)achrome - interface speed differences

HULK — Tue, 13 Jan 2015 18:12:30 GMT

Hello Craig,

I would recommend you to implement QOS on this PAN firewall to monitor the actual bandwidth. You may compare the value between Pan(w)achrome and QOS.

QoS in PAN-OS 4.1

Thanks

Re: Pan(w)achrome - interface speed differences

mivaldi — Tue, 13 Jan 2015 18:44:06 GMT

For that, the following document may be useful

Graphic Traffic Monitoring for Interfaces - QoS Statistics

Your packets may be exiting different interfaces.