Application limit when pass FW

[manaschai]

Hello every one .

     I try to implement PA-500 on PAN-OS 4.1.6. Then I configure 2 security policies.

    1. security policy for deny bittorrent from both direction (Trust and Untrust zone) .

    2. security policy for allow all traffic both direction but enable AntiVirus, Spyware, Vulnerability and URL filtering on alert.

My environment for implement is

                                                          Brance ======= 40 MB ======= Data Center

Client == Switch ==Palo alto == Router == MPLS VPN COULD == Router == Switch==ACCPAC server

Then I try to test use applications found ACCPAC software (accounting software) slowly. After that I check by install bandwidth monitoring software and found the bandwidth behind PA-500 (14 Mbps) differrent in front of PA-500 (26 Mbps) about 12 Mbps at file size 146 MB.

     I check firewall troughput by command it shown about 30 Mbps.

     After that I try to disable AntiVirus, Spyware, Vulnerability and URL filtering (for disable threat prevention). Then test use ACCPAC again but result same before disable treat prevention .

     Then I try to use FTP application upload and down file to same server. I found behind PA-500 down/up speed 20 Mbps and in front of PA-500 down/up speed 39 Mbps.

     Note: The client machine run on Window XP operating system.

     Why traffic different between behind and in front of PA-500 in case traffic not over throughput spec?

     How to fix this problem or other solution for fix it. 

Manaschai S.

[mikand]

Verify speed/duplex being used for all links.

Also verify that routes are setup correctly in your PA-device (and stuff pointing to your PA-device).

[manaschai]

Hello Miknad

     Thank you for reply.

     I check configure on PA-500 device all interface set auto both speed and duplex. Then I use CLI command for check all interface on PA-500 devices for speed/duplex. The speed/duplex of PA-500 and Switch  same  are 100 Mbps/Full duplex. After that I check routing it correct.

Manaschai S.