topic Re: Using PA-200 for home internet router? in General Topics

Using PA-200 for home internet router?

OMatlock — Mon, 27 Feb 2017 17:57:44 GMT

Hello folks,

I recently bought a used PA-200 software version 6.1.4 for learning and testing purposes.

I replace my home Linksys with the PA-200 following this article to configure.

https://live.paloaltonetworks.com/t5/Configuration-Articles/Setting-Up-the-PA-200-for-Home-and-Small-Office/ta-p/61838

It's working. However, I notice that the internet is somewhat slower, loading web pages, etc.

Is this expected? Extra traffic processing, etc?

Curious if there are tips or best practice that could make a difference here?

Thanks!

Re: Using PA-200 for home internet router?

JDominguez — Mon, 27 Feb 2017 20:46:10 GMT

Make sure your link settings are set to auto (Network > Interfaces > 'ethernet1/x' > Advanced > Link Settings). Make sure your not decrypting your trusted traffic.

- JD

Re: Using PA-200 for home internet router?

OMatlock — Mon, 27 Feb 2017 21:11:11 GMT

Thank you for responding!

I checked both interfaces (external/internal) and both link settings are all auto.

Not sure how to tell if decrypting traffice on trust.

If you have any other comments let me know, will close thread soon.

Thanks!

Re: Using PA-200 for home internet router?

BPry — Mon, 27 Feb 2017 21:52:45 GMT

If you don't recall setting it up then you likely are not decrypting as it's a little bit more of an involved process. The PA-200 really shouldn't affect your overall traffic speed that much. Overall though this would also depend on how much traffic you are processing, if your decrypting traffic, what security policies and such you have configured on the device, and what exactly you were running with before.

I imagine that you are noticing the small delay because your old router wasn't doing anything but processing your traffic, when you put an actual firewall infront of all your devices it would be normal to measure a slight delay, usually it isn't something that you would notice on a consumer link though.

Re: Using PA-200 for home internet router?

DonohoeRobert — Mon, 27 Feb 2017 22:08:20 GMT

HI There,

Try to narrow it down..

is it slow dns response ? change the dns server from what ever is is to 8.8.8.8. If it is 8.8.8.8 change it to what the ISP provide.

switch off threat, url filtering & data filtering if on and test the speed with and without it on

monitor the dashboard when testing for the dp and mp readings - on pa-200 these are closer linked than other models

the version testing with is wee bit dated, try put your hand to at least the lasted release on 6.1

factory reset if not done before you purchased .. better to start with a fresh unit always

best regards

Re: Using PA-200 for home internet router?

TranceforLife — Sun, 05 Mar 2017 14:17:22 GMT

Agreed with all comments. Test with the cable connected to your router switch port with your laptop, where (as people mentioned earlier) create a simple policy with any any (no profiles) allow all to the Untrust zone. Tweak the DNS (remember you cannot use firewall as a DNS server for your clients). If you configure your DHCP server on Palo to use its IP as a first (primary DNS) and secondary any other this could slow down you DNS requests first DNS server will fail to response and client should use/try a secondary but it will be some delays hence slowness. Cannot think of anything else that could slow your traffic fom the firewall side.

Re: Using PA-200 for home internet router?

jambulo — Tue, 28 Feb 2017 21:32:13 GMT

I run a PA-200 at home as well and have not come across any performance issues. I'm on PAN-OS 7.1.something.

Re: Using PA-200 for home internet router?

PaloWhato — Sat, 27 May 2017 18:20:13 GMT

OMatlock can you PM ME

i followed that article "somewhat"

along with videos and other stuff and what I do its not working

i know I am missing a checkbox or something.

also for the ippool subnet i dont have that tab. I am on palo alto 5.0.12

Re: Using PA-200 for home internet router?

TranceforLife — Sun, 28 May 2017 15:28:15 GMT

Hey,

Need a bit more details (current topology, screenshot ect). FYI 5.0.X reached EoL:

https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-life-summary

Re: Using PA-200 for home internet router?

PaloWhato — Sun, 16 Jul 2017 01:40:09 GMT

I am thinking of uploading config file ....