Palo Alto ping response is slow from Cisco

sandeep.paul — Fri, 13 Oct 2017 06:08:18 GMT

A directly connected Cisco 4500 Switch Ping's to different office goes through the PA cause nearly 700-1000msec, whereas PA pinging the Server to same site has only 20msec. I understand the Ping ( and Extended ping with TOS 184) is not the exact way to work on the Issue.

We have OSPF running between PA and Cisco.

But I was informed that PA will not catch up to Cisco in Ping responses, which means Data Plane is uneffected.

Is there any options to address this issue. Please suggest!

Thanks

Re: Palo Alto ping response is slow from Cisco

reaper — Fri, 13 Oct 2017 11:00:13 GMT

Hi Sandeep

in regards to not gtting the same ping response time when pinging through a cisco compares to pinging through a PANW firewall, the firewall will inspect the ping packet like any other packet so there will be a liitle (milliseconds) delay compared to a switch/router that simply forwards

700-1000 ms however would merrit a deeper look into an underlying issue. what is the current load on the dataplane, is there high packetrate, did you make sure interface settings are identical between firewall and switch (auto/auto/ 100/full-duplex,...) are you certain the cable quality is ok etc.

topic Re: Palo Alto ping response is slow from Cisco in General Topics

Palo Alto ping response is slow from Cisco

Re: Palo Alto ping response is slow from Cisco