topic Re: Slow throughput on newly installed PA-820 in General Topics

Slow throughput on newly installed PA-820

Networking2017 — Fri, 09 Mar 2018 14:21:59 GMT

Hello all...I have a newly installed HA pair of PA-820. Our ISP circuit is 50Mbps/50Mbps. Testing from a LAN pc, I am only able to download a max of 14Mbps using speedtest.net or speakeasy.net. I have called Palo Alto support and they suggested setting up QOS on my WAN interface and setting the speed to 50Mbps on the interface.

The slow downloads occur if I have av, spyware, etc on or off.

Any thoughts?

Re: Slow throughput on newly installed PA-820

egistau — Mon, 12 Mar 2018 07:12:00 GMT

Hi @Networking2017

50Mbps for the PA820 with all feature enable it's easy work for CPUs

I would investigate the network configuration and the negotiation interfaces.

Re: Slow throughput on newly installed PA-820

Networking2017 — Mon, 12 Mar 2018 14:57:24 GMT

Thanks for your feedback. The interfaces check out and don't show errors. Also, my upload speed is fine.

I plug in a laptop tot he same ISP switch and get full download and upload speeds. It is only when connecting through the Palo Alto that I get slow download speeds.

Re: Slow throughput on newly installed PA-820

OtakarKlier — Mon, 12 Mar 2018 15:06:22 GMT

Hello,

I am assuming you have checked the speed/duplex configurations on both the ISP device and PAN?

Regards,

Re: Slow throughput on newly installed PA-820

Networking2017 — Tue, 13 Mar 2018 15:31:35 GMT

Yes, the interfaces look good. All hard coded at 100Mbps Full.

No itnerface errors.

Re: Slow throughput on newly installed PA-820

OtakarKlier — Tue, 13 Mar 2018 17:09:22 GMT

Hello,

I am going to assume you mean hard coded on both sides, the PAN and other interface?

Regards,

Re: Slow throughput on newly installed PA-820

Networking2017 — Tue, 13 Mar 2018 17:49:16 GMT

Yes, both side of the PAN. All involved interfaces have been checked.

Re: Slow throughput on newly installed PA-820

OtakarKlier — Tue, 13 Mar 2018 18:38:26 GMT

Hmm, perhaps its time to open a support case?

Re: Slow throughput on newly installed PA-820

Networking2017 — Tue, 13 Mar 2018 18:39:15 GMT

True. I have had a case open for 10 days. Their solution is to enable QOS? Not sure how this makes sense.

Re: Slow throughput on newly installed PA-820

stlenger — Mon, 07 May 2018 08:45:01 GMT

speedtest.net is weird. Because of having the PA hanging between it will show very bad results, i guess it has to do with how speedtest determines throughput. I have created an extra policy that excepts speedtest.net from any scanning. Since AppID on speedtest is currently incomplete (paypload is not recognized) i created a custom appID for it (http header looking for speedtest). It now shows desired (full) bandwith. Use nperf.com instead if you don't want to create a policy for that.

TL;DR don't trust speedtest.net results when using PA security on it. Use nperf.com instead.