Hello all...I have a newly installed HA pair of PA-820. Our ISP circuit is 50Mbps/50Mbps. Testing from a LAN pc, I am only able to download a max of 14Mbps using speedtest.net or speakeasy.net. I have called Palo Alto support and they suggested setting up QOS on my WAN interface and setting the speed to 50Mbps on the interface.
The slow downloads occur if I have av, spyware, etc on or off.
50Mbps for the PA820 with all feature enable it's easy work for CPUs
I would investigate the network configuration and the negotiation interfaces.
Thanks for your feedback. The interfaces check out and don't show errors. Also, my upload speed is fine.
I plug in a laptop tot he same ISP switch and get full download and upload speeds. It is only when connecting through the Palo Alto that I get slow download speeds.
speedtest.net is weird. Because of having the PA hanging between it will show very bad results, i guess it has to do with how speedtest determines throughput. I have created an extra policy that excepts speedtest.net from any scanning. Since AppID on speedtest is currently incomplete (paypload is not recognized) i created a custom appID for it (http header looking for speedtest). It now shows desired (full) bandwith. Use nperf.com instead if you don't want to create a policy for that.
TL;DR don't trust speedtest.net results when using PA security on it. Use nperf.com instead.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!