topic Re: Performance issues with a particular site in General Topics

Performance issues with a particular site

ICarder — Wed, 17 Dec 2014 15:20:32 GMT

Hello,

I'm having some performance issues with a particular site. I opened a case, but I thought I would pick people's brains here.

I'm working my way backwards from the client out to the edge of our network to see if there's any obvious issues on my end. Is there any diagnostics or fact finding to determine if my PA3020 is showing any performance or connection problems with a particular website?

Thanks in advance!

-Ian

Re: Performance issues with a particular site

VinceM — Wed, 17 Dec 2014 15:50:20 GMT

Hi,

First use tools like dev tool integrate in Firefox (for exemple), just to know if the perf issue is comming from one object in the page or gloablly from page.

Then, make pcap in Palo (at drop stage) to know if there is, for any reason drops on network.

After that you can:

disable any profile for bypassing all L7 analyse done by the palo

Create app overide

Create dedicate security rule

...

Many test to do 🙂

Re: Performance issues with a particular site

ICarder — Wed, 17 Dec 2014 15:55:45 GMT

Hi Vince,

Thank you for responding. Do you know if there's something specific to Chrome I can try? That is the browser that my users are utilizing. I'll look into the traffic tool as well. The engineer didn't see anything obvious from the standard tools, but did want to look into some traffic logging for fragmentation errors.

-Ian

Re: Performance issues with a particular site

Dz3015 — Wed, 17 Dec 2014 17:05:25 GMT

Do you have a data filtering profile turned on? We have experienced issues in the past depending on what regular expressions were used in that.

Other than that, I agree with VinceM , you can either throw the specific site in an override or put a specific rule in for it that you can remove inspection profiles from to see if a certain one is causing the slowness.

Re: Performance issues with a particular site

ICarder — Wed, 17 Dec 2014 20:37:49 GMT

I do not have any data filtering rules under objects/data filtering. Regarding the override, would I be putting that into the Policies/Security section or is there another place to put the site/ip?

Re: Performance issues with a particular site

parmas — Wed, 17 Dec 2014 22:42:04 GMT

I have also used HTTP debuggers to help isolate this type of issues. Fiddler (www.telerik.com/download/fiddler) and HTTPWatch are the ones I've used in the past.

Re: Performance issues with a particular site

Dz3015 — Thu, 18 Dec 2014 13:24:08 GMT

I agree with parmas, Fiddler is a powerful tool to diagnose issues with a website. This may tell you if the specific site is having problems fetching a specific part.

Re: Performance issues with a particular site

Dz3015 — Thu, 18 Dec 2014 13:27:52 GMT

Application Overrides are in a separate policy section. I would suggest using this to rule out inspection as the reason for the slowness but if you notice it resolves it I would take the override out and test a specific rule for the site where you add inspection profiles back until you find the cause. Application overrides basically bypass any inspection.

Re: Performance issues with a particular site

jkim2 — Fri, 19 Dec 2014 04:22:42 GMT

also try google or ie development tool from the browser. They show a lot of info including timing