GlobalProtect slowness

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

GlobalProtect slowness

L0 Member

Is anyone that is using GlobalProtect seeing significant performance issues?  We are running PAN OS 5.0.10 and GP 1.2.8.  We are also doing full tunnel.  When I do a speed test from home without GP enabled I get 20 Mbps down and 5 Mbps up.  With GP enabled I get 5 Mbps down and 0.25 Mbps down.  Now I understand that I should be seeing some impact of having my traffic being back-hauled to our PAN device but this much?  Additionally, when I upload a file from my GP client device to our corporate network, a 12 MB file takes ~6 minutes to upload.  Using our other VPN solution the same task takes 30 seconds.  Anyone else having an experience similar to this or have any answers?  Thanks in advance.

1 accepted solution

Accepted Solutions

Are you using SSL or IPSEC? I have found throughput much better when using SSL.

Dominic

View solution in original post

8 REPLIES 8

L6 Presenter

I did not test with speed test or etc sites...But I made another test...

I used GP and I used other vendor ssl vpn(software- no firewall) to same site.

I saw that connection with Gp is very slow.Something should be done to improve that performance...

Also I missed that part,

both connection is made on same Lan- Palo alto - Wan topology.So it should be(slowness) related to GP.

Are you using SSL or IPSEC? I have found throughput much better when using SSL.

Dominic

Tested with SSL only.

L4 Transporter

The GP client had a performance increase included in 1.2.9 for IPsec traffic.

Perhaps you could give it a try?

Thank you all who responded.  When I disabled IPSec my performance increased significantly.  Uploading a 12 MB file to my corporate network now takes 1 minutes instead of 6 minutes.  Are there any disadvantages to using SSL instead of IPSec that anyone know of?

+1 for the question regarding IPSec vs SSL. What are the pros and cons?

Thanks

Just wanted to let everyone know that if they are having any GlobalProtect issues, and need to troubleshoot the issue, our Very own @kiwi has written a great blog all about troubleshooting GlobalProtect.

Be sure to check it out here: 
https://live.paloaltonetworks.com/t5/blogs/dotw-globalprotect-troubleshooting-tips/ba-p/383911

LIVEcommunity team member
Stay Secure,
Joe
Don't forget to Like items if a post is helpful to you!
  • 1 accepted solution
  • 7855 Views
  • 8 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!