Bandwidth Usage of Traps

L1 Bithead

Bandwidth Usage of Traps



I am looking for some information on the amount of bandwidth used by the Traps agent when communicating with the ESM server.


Also, any averages on the log volume generated by each agent?


Any help is appreciated.



L4 Transporter

Re: Bandwidth Usage of Traps

Hi @MHamad


The following table presents the minimal Traps network bandwidth requirement (per 16k agents)Screen Shot 2017-06-09 at 5.09.24 PM.pngMulti ESM Considerations


If Multi ESM is not used – make sure to disable ‘Multi ESM’ feature from the ESM

It is recommended to use more than one ESM Server in one of the following scenarios:

- Agents are located in different geographic locations

- More than 16,000 agents are planned to be deployed

- High availability/Disaster Recovery scenarios


To have Multi ESM environment functioning effectively it is required to have latency lower than 100ms between ESM Servers & the MS SQL database.

When multiple ESM Servers are required it is recommended to have a forensic folder on every ESM server, this will require an installation of IIS and BITS in the ESM Server (even if it doesn’t have ESM Console installed on the same server).3


I hope this helps.



Tags (4)
L0 Member

Re: Bandwidth Usage of Traps

En el caso de TMS, ¿cual seria el consumo de ancho de banda de los puntos finales?

L4 Transporter

Re: Bandwidth Usage of Traps


For every 100,000 agents, you will need to allocate 120Mbps of bandwidth. The bandwidth requirement scales linearly. For example, to support 300,000 agents, plan to allocate 360Mbps of bandwidth (three times the amount required for 100,000 agents).

L0 Member

Re: Bandwidth Usage of Traps



Good day.  I would like to check if Palo Alto Traps Endpoint security can work over satellite network with latency varying from 700 - 2000ms and speed from 512kbps to 1Mbps?




Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!