topic Re: Global Protect Speeds? in General Topics

Global Protect Speeds?

NeilR — Tue, 10 Nov 2015 02:17:45 GMT

Hi, realtively new to PAN, and have some questions related to Global Protect speeds.

I have a win 7 x64 client connected to a gateway on my 3020.

From the client to the internet over 30mbs of bw

From the PA3020 VPN interface to the itnernet 20mbs of bw

I set up file copies of large iso files and compare the speeds.

pulling from server to client I'm seeing speeds of up to 1mbs after tcp ramps up

pushing from server to the client seeing 6.5-7 mbs

Any idea why so asymetric? Are there settings that control or limit client side bw?

Client side operations seem slow overall using GP

thx

Hithead — Tue, 10 Nov 2015 08:54:44 GMT

what is the upload speed of the server and client site?

Raido_Rattameister — Tue, 10 Nov 2015 10:01:55 GMT

Verify that your tunnel uses IPSec not SSL.

First option has less overhead and better throughput.

Check that it is permitted in GP config and sec policy.

NeilR — Tue, 10 Nov 2015 20:10:41 GMT

OK - test setup not so controlled - SSL was in use, but ipsec was configured. So ipsec not permitted. Not sure why asymetric.

New test. Connection to switch directly on subnet with firewall ext int, client address in same range. ipsec connection verified.

speeds same both directions, Approx 200mbs on 1gb interfaces

for comparison I ran local test and saw full 1gbs wire speeds so...

is my throughput capped becuase that's all a 3020 can push through?

Or are all sessions reduced by similar ratio? A 10mbs connection gets on 2mbs throughput.

And are there any settings that limit client max available?