Application limit when pass FW

manaschai — Wed, 18 Jul 2012 15:33:50 GMT

Hello every one .

I try to implement PA-500 on PAN-OS 4.1.6. Then I configure 2 security policies.

1. security policy for deny bittorrent from both direction (Trust and Untrust zone) .

2. security policy for allow all traffic both direction but enable AntiVirus, Spyware, Vulnerability and URL filtering on alert.

My environment for implement is

Brance ======= 40 MB ======= Data Center

Client == Switch ==Palo alto == Router == MPLS VPN COULD == Router == Switch==ACCPAC server

Then I try to test use applications found ACCPAC software (accounting software) slowly. After that I check by install bandwidth monitoring software and found the bandwidth behind PA-500 (14 Mbps) differrent in front of PA-500 (26 Mbps) about 12 Mbps at file size 146 MB.

I check firewall troughput by command it shown about 30 Mbps.

After that I try to disable AntiVirus, Spyware, Vulnerability and URL filtering (for disable threat prevention). Then test use ACCPAC again but result same before disable treat prevention .

Then I try to use FTP application upload and down file to same server. I found behind PA-500 down/up speed 20 Mbps and in front of PA-500 down/up speed 39 Mbps.

Note: The client machine run on Window XP operating system.

Why traffic different between behind and in front of PA-500 in case traffic not over throughput spec?

How to fix this problem or other solution for fix it.

Manaschai S.

Re: Application limit when pass FW

mikand — Wed, 18 Jul 2012 23:05:51 GMT

Verify speed/duplex being used for all links.

Also verify that routes are setup correctly in your PA-device (and stuff pointing to your PA-device).

Re: Application limit when pass FW

manaschai — Thu, 19 Jul 2012 00:12:38 GMT

Hello Miknad

Thank you for reply.

I check configure on PA-500 device all interface set auto both speed and duplex. Then I use CLI command for check all interface on PA-500 devices for speed/duplex. The speed/duplex of PA-500 and Switch same are 100 Mbps/Full duplex. After that I check routing it correct.

Manaschai S.

topic Re: Application limit when pass FW in General Topics

Application limit when pass FW

Re: Application limit when pass FW

Re: Application limit when pass FW