topic Re: Palo Alto Slow in General Topics

Palo Alto Slow

itracing — Mon, 21 Oct 2013 09:47:58 GMT

Hello all,
I am having a little problem of slow when I browse the web interface of the Palo Alto (very slow loading pages ...)
Do you have an explanation for that?
My version of PAN OS Software Version 4.0.14
thank you

Re: Palo Alto Slow

Retired Member — Mon, 21 Oct 2013 10:33:55 GMT

is this issue new or after upgrade or something ?

did you try to restart management server?

Re: Palo Alto Slow

rmonvon — Tue, 22 Oct 2013 21:13:32 GMT

Additionally, you can also clear your browser's cache to see if that might clear up the issue.

Re: Palo Alto Slow

scantwell — Wed, 23 Oct 2013 17:49:28 GMT

Also, I think it is important to understand what hardware platform you are running, what screens/pages are loading slowly for you.

For example. I have a PA-2050 that when I first configured it, all was working fine.

As I continue to add more rules the security policy page gets slower as it takes time to read the entire page etc.

Unless someone comes back to tell me this is abnormal, I am pretty sure this is working as intended.

Re: Palo Alto Slow

${userLoginName} — Thu, 24 Oct 2013 06:10:30 GMT

If you are indeed a PA 2k or 4k, then you might experience gui slowness. These are the "older" models and in some cases the management plane is not powerful enough.

This can be caused by a lot of things, a lot of User-ID that needs to be done, or even a lot of logging. If you have a few k of logs every minute then you'll notice slowness in the gui, since it is the mgmt plane that does all the logging.

Re: Palo Alto Slow

ssharma — Thu, 24 Oct 2013 13:17:25 GMT

Hi,

Run "show system resources | match srvr" and just "show system resources"

1st command should provide you with memory used by management-server and device server, check if those are high.

2nd command will give you information regarding swap memory used and also the wait time (wa x%), check if that is high

If any of them is high, try restarting your management server and see if that makes any difference.

Hope that helps.

Re: Palo Alto Slow

RNC — Fri, 25 Oct 2013 10:26:59 GMT

"show system resources follow" is also useful.

keep an eye on the wa%, as this reflects the amount of time the system is waiting on i/o. It ought to keep in low single figures.

the mangement, device and logs servers will be busy.

" less mp-log mp-monitor.log" "less mp-log mp-monitor.log.0" etc will let you look at a record of system state the devices keep. It includes the show system resources output, and its useful if you want to see how your system has behaved over time. if you have not used "less", before, its a pager tool from linux/unix. google 'man less' for details. forward slash / for search forward, ? for search backwards are handy.