05-29-2014 10:07 AM
Is anyone that is using GlobalProtect seeing significant performance issues? We are running PAN OS 5.0.10 and GP 1.2.8. We are also doing full tunnel. When I do a speed test from home without GP enabled I get 20 Mbps down and 5 Mbps up. With GP enabled I get 5 Mbps down and 0.25 Mbps down. Now I understand that I should be seeing some impact of having my traffic being back-hauled to our PAN device but this much? Additionally, when I upload a file from my GP client device to our corporate network, a 12 MB file takes ~6 minutes to upload. Using our other VPN solution the same task takes 30 seconds. Anyone else having an experience similar to this or have any answers? Thanks in advance.
05-29-2014 12:49 PM
Are you using SSL or IPSEC? I have found throughput much better when using SSL.
Dominic
05-29-2014 10:14 AM
I did not test with speed test or etc sites...But I made another test...
I used GP and I used other vendor ssl vpn(software- no firewall) to same site.
I saw that connection with Gp is very slow.Something should be done to improve that performance...
05-29-2014 10:16 AM
Also I missed that part,
both connection is made on same Lan- Palo alto - Wan topology.So it should be(slowness) related to GP.
05-29-2014 12:49 PM
Are you using SSL or IPSEC? I have found throughput much better when using SSL.
Dominic
05-29-2014 12:54 PM
Tested with SSL only.
05-29-2014 06:43 PM
The GP client had a performance increase included in 1.2.9 for IPsec traffic.
Perhaps you could give it a try?
05-30-2014 04:45 AM
Thank you all who responded. When I disabled IPSec my performance increased significantly. Uploading a 12 MB file to my corporate network now takes 1 minutes instead of 6 minutes. Are there any disadvantages to using SSL instead of IPSec that anyone know of?
06-02-2014 01:22 AM
+1 for the question regarding IPSec vs SSL. What are the pros and cons?
Thanks
03-30-2021 02:52 PM
Just wanted to let everyone know that if they are having any GlobalProtect issues, and need to troubleshoot the issue, our Very own @kiwi has written a great blog all about troubleshooting GlobalProtect.
Be sure to check it out here:
https://live.paloaltonetworks.com/t5/blogs/dotw-globalprotect-troubleshooting-tips/ba-p/383911
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
