Slow throughput on newly installed PA-820

L1 Bithead

Slow throughput on newly installed PA-820

Hello all...I have a newly installed HA pair of PA-820.  Our ISP circuit is 50Mbps/50Mbps.  Testing from a LAN pc, I am only able to download a max of 14Mbps using speedtest.net or speakeasy.net.  I have called Palo Alto support and they suggested setting up QOS on my WAN interface and setting the speed to 50Mbps on the interface.

 

The slow downloads occur if I have av, spyware, etc on or off.

 

Any thoughts?

 

 

L1 Bithead

Re: Slow throughput on newly installed PA-820

Hi @Networking2017

 

50Mbps for the PA820 with all feature enable it's easy work for CPUs

 

I would investigate the network configuration and the negotiation interfaces.

 

 

L1 Bithead

Re: Slow throughput on newly installed PA-820

Thanks for your feedback.  The interfaces check out and don't show errors.  Also, my upload speed is fine.

 

I plug in a laptop tot he same ISP switch and get full download and upload speeds.  It is only when connecting through the Palo Alto that I get slow download speeds.

L7 Applicator

Re: Slow throughput on newly installed PA-820

Hello,

I am assuming you have checked the speed/duplex configurations on both the ISP device and PAN?

 

Regards,

L1 Bithead

Re: Slow throughput on newly installed PA-820

Yes, the interfaces look good.  All hard coded at 100Mbps Full.

 

No itnerface errors.

L7 Applicator

Re: Slow throughput on newly installed PA-820

Hello,

I am going to assume you mean hard coded on both sides, the PAN and other interface? 

 

Regards,

L1 Bithead

Re: Slow throughput on newly installed PA-820

Yes, both side of the PAN.  All involved interfaces have been checked.

L7 Applicator

Re: Slow throughput on newly installed PA-820

Hmm, perhaps its time to open a support case?

L1 Bithead

Re: Slow throughput on newly installed PA-820

True.  I have had a case open for 10 days.  Their solution is to enable QOS?  Not sure how this makes sense.

L1 Bithead

Re: Slow throughput on newly installed PA-820

speedtest.net is weird. Because of having the PA hanging between it will show very bad results, i guess it has to do with how speedtest determines throughput. I have created an extra policy that excepts speedtest.net from any scanning. Since AppID on speedtest is currently incomplete (paypload is not recognized) i created a custom appID for it (http header looking for speedtest). It now shows desired (full) bandwith. Use nperf.com instead if you don't want to create a policy for that.


TL;DR don't trust speedtest.net results when using PA security on it. Use nperf.com instead.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!