topic Re: GlobalProtect slowness in General Topics

GlobalProtect slowness

legeremt — Thu, 29 May 2014 17:07:37 GMT

Is anyone that is using GlobalProtect seeing significant performance issues? We are running PAN OS 5.0.10 and GP 1.2.8. We are also doing full tunnel. When I do a speed test from home without GP enabled I get 20 Mbps down and 5 Mbps up. With GP enabled I get 5 Mbps down and 0.25 Mbps down. Now I understand that I should be seeing some impact of having my traffic being back-hauled to our PAN device but this much? Additionally, when I upload a file from my GP client device to our corporate network, a 12 MB file takes ~6 minutes to upload. Using our other VPN solution the same task takes 30 seconds. Anyone else having an experience similar to this or have any answers? Thanks in advance.

Re: GlobalProtect slowness

Retired Member — Thu, 29 May 2014 17:14:50 GMT

I did not test with speed test or etc sites...But I made another test...

I used GP and I used other vendor ssl vpn(software- no firewall) to same site.

I saw that connection with Gp is very slow.Something should be done to improve that performance...

Re: GlobalProtect slowness

Retired Member — Thu, 29 May 2014 17:16:26 GMT

Also I missed that part,

both connection is made on same Lan- Palo alto - Wan topology.So it should be(slowness) related to GP.

Re: GlobalProtect slowness

dburns — Thu, 29 May 2014 19:49:02 GMT

Are you using SSL or IPSEC? I have found throughput much better when using SSL.

Dominic

Re: GlobalProtect slowness

Retired Member — Thu, 29 May 2014 19:54:04 GMT

Tested with SSL only.

Re: GlobalProtect slowness

sspringer — Fri, 30 May 2014 01:43:56 GMT

The GP client had a performance increase included in 1.2.9 for IPsec traffic.

Perhaps you could give it a try?

Re: GlobalProtect slowness

legeremt — Fri, 30 May 2014 11:45:52 GMT

Thank you all who responded. When I disabled IPSec my performance increased significantly. Uploading a 12 MB file to my corporate network now takes 1 minutes instead of 6 minutes. Are there any disadvantages to using SSL instead of IPSec that anyone know of?

Re: GlobalProtect slowness

jeanvancaloen — Mon, 02 Jun 2014 08:22:33 GMT

+1 for the question regarding IPSec vs SSL. What are the pros and cons?

Thanks

Re: GlobalProtect slowness

jdelio — Tue, 30 Mar 2021 21:52:26 GMT

Just wanted to let everyone know that if they are having any GlobalProtect issues, and need to troubleshoot the issue, our Very own @kiwi has written a great blog all about troubleshooting GlobalProtect.

Be sure to check it out here:
https://live.paloaltonetworks.com/t5/blogs/dotw-globalprotect-troubleshooting-tips/ba-p/383911