Getting Low Speed

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Getting Low Speed

L1 Bithead

Guys,

My Lan users are getting a slow downloading speed. I have checked the ISP cable directly and there I am getting the accurate speed which is 30Mbps. But when I am connecting the ISP cable to Paloalto after that I am running the speed test it's gives me only 4 Mbps.

I have tested also one pc with no URL filtering or no profiles applied on it, and also gives full internet access but still the same issue.

Is there anyone who can help?

2 REPLIES 2

L2 Linker

I would try running a trace route from an affected endpoint and see if the hops make sense.

 

Also a packet capture from the Palo Alto from such endpoint.

 

Goals:

 

Check if there is a resulting "drop" packet capture.

Check the global counters by using the same packet capture filters running the command:

"show counter global filter packet-filter yes delta yes"

 

This will give you global counters filtered by your packet capture filters. This will very likely point you to the culprit.

 

I would assume you will see things such as "asymmetric path" drops or "land attack" related drops.

 

https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-admin/monitoring/take-packet-captures

Cyberforce Commander.
Don't forget to hit that Like button if a post is helpful to you!

Cyber Elite
Cyber Elite

If you are always using a globalprotect VPN then check if your VPN is using SSL as this has bad performance compared to ipsec:

 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGkCAK

 

How to Confirm if GlobalProtect Tunnel is Using IPSec or SSL? - Knowledge Base - Palo Alto Networks

 

 

 

Also you can check for drops using packet capture and global counters following the article:

 

LIVEcommunity - Knowledge sharing: Palo Alto checking for drops (rejects ,discards), slowness (laten...

 

 

For more globalprotect issues and you don't see anything in the counters and capture then check also the PanGPS and PanGPA logs and you check the article below: 

 

 

LIVEcommunity - Knowledge sharing: Globalprotect troubleshooting/investgation. Split tunnel,Globalpr...

 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!