topic NAT very slow in General Topics

NAT very slow

javier.brito — Thu, 17 Aug 2017 03:26:53 GMT

PA-3020 Software Version 8.0.4
I have several policies U-Turn Nat and Destination Address Translation in the DMZ
Three times a day the acces to these Policies becomes very slow
If I send a ping to one of these servers the time is very large the 1000 to 2000 ms approximately, but
the internet service continues to work in a normal way
When this happens I make any changes in PA 3020 and apply a commit and immediately fixes the problem

Thanks for any suggestions

Re: NAT very slow

BPry — Thu, 17 Aug 2017 18:54:58 GMT

@javier.brito,

It appears as though 8.0.4 is causing some issues with the PA-3000 series. I would recommend simply reverting to your previous version for the time being and see if that clears things up.

Re: NAT very slow

javier.brito — Thu, 17 Aug 2017 20:41:43 GMT

This problem I have since version 8.0.1, I do not renember if with the version 7.1.X also presented this problem

Re: NAT very slow

BPry — Fri, 18 Aug 2017 03:32:06 GMT

@javier.brito

Can you provide a full(er) list of troubleshoooting steps that you have taken to-date. I don't know of anything off hand that would cause a NAT issue at present with the 3020s and the 8.0.x code.