topic Re: How can we see/monitor firewall throughput? not of interfaces in General Topics

How can we see/monitor firewall throughput? not of interfaces

raji_toor — Fri, 18 May 2018 15:51:15 GMT

Is there a way to check/monitor PA advertised throughput values for the following. Now since the new firewalls are out, PA sales are pitching for upgrades and management wants to know the numbers.

App-ID firewall throughput
Threat prevention throughput
IPSec VPN throughput
Connections per second

Re: How can we see/monitor firewall throughput? not of interfaces

BPry — Mon, 21 May 2018 10:55:35 GMT

@raji_toor,

SO the only way that the firewall would actually account for this on its own would be through DP values, or you could simply utilize a sole 10Gig interface as testing and flood that interface. From personal testing though Palo Alto's published numbers are pretty much exactly what you're going to get.

Re: How can we see/monitor firewall throughput? not of interfaces

raji_toor — Tue, 22 May 2018 19:31:28 GMT

@BPry I don't want to test i want to see/monitor current use of these values. So if you have tested firewall for these numbers, how did you do it. What commands reveal these numbers/values.

Re: How can we see/monitor firewall throughput? not of interfaces

BPry — Tue, 22 May 2018 19:59:26 GMT

@raji_toor,

You literally measure the throughput of the device with that feature enabled, generally with a set packet size. That's why you won't really be able to measure this on a set box. These numbers are generated with the set feature turned on using a set packet size and throughput is measured until you max the box. Then those numbers are published.