Global Protect Speeds?

Reply
L2 Linker

Global Protect Speeds?

Hi, realtively new to PAN, and have some questions related to Global Protect speeds.

I have a win 7 x64 client connected to a gateway on my 3020. 

From the client to the internet over 30mbs of bw

From the PA3020 VPN interface to the itnernet 20mbs of bw

 

I set up file copies of large iso files and compare the speeds.

pulling from server to client I'm seeing speeds of up to 1mbs after tcp ramps up

pushing from server to the client seeing 6.5-7 mbs

 

Any idea why so asymetric? Are there settings that control or limit client side bw?

 

Client side operations seem slow overall using GP 

 

thx

L4 Transporter

what is the upload speed of the server and client site?

L7 Applicator

Verify that your tunnel uses IPSec not SSL.

First option has less overhead and better throughput.

Check that it is permitted in GP config and sec policy.

Enterprise Architect @ Cloud Carib www.cloudcarib.com
ACE, PCNSE, PCNSI
L2 Linker

OK - test setup not so controlled - SSL was in use, but ipsec was configured. So ipsec not permitted. Not sure why asymetric.

 

New test. Connection to switch directly on subnet with firewall ext int, client address in same range. ipsec connection verified. 

 

speeds same both directions, Approx 200mbs on 1gb interfaces

 

for comparison I ran local test and saw full 1gbs wire speeds so... 

 

is my throughput capped becuase that's all a 3020 can push through? 

 

Or are all sessions reduced by similar ratio? A 10mbs connection gets on 2mbs throughput.

 

And are there any settings that limit client max available?

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!