My Lan users are getting a slow downloading speed. I have checked the ISP cable directly and there I am getting the accurate speed which is 30Mbps. But when I am connecting the ISP cable to Paloalto after that I am running the speed test it's gives me only 4 Mbps.
I have tested also one pc with no URL filtering or no profiles applied on it, and also gives full internet access but still the same issue.
Is there anyone who can help?
I would try running a trace route from an affected endpoint and see if the hops make sense.
Also a packet capture from the Palo Alto from such endpoint.
Check if there is a resulting "drop" packet capture.
Check the global counters by using the same packet capture filters running the command:
"show counter global filter packet-filter yes delta yes"
This will give you global counters filtered by your packet capture filters. This will very likely point you to the culprit.
I would assume you will see things such as "asymmetric path" drops or "land attack" related drops.
If you are always using a globalprotect VPN then check if your VPN is using SSL as this has bad performance compared to ipsec:
Also you can check for drops using packet capture and global counters following the article:
For more globalprotect issues and you don't see anything in the counters and capture then check also the PanGPS and PanGPA logs and you check the article below:
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!