GlobalProtect slowness

Announcements

Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.

Reply
legeremt
L0 Member

GlobalProtect slowness

Is anyone that is using GlobalProtect seeing significant performance issues?  We are running PAN OS 5.0.10 and GP 1.2.8.  We are also doing full tunnel.  When I do a speed test from home without GP enabled I get 20 Mbps down and 5 Mbps up.  With GP enabled I get 5 Mbps down and 0.25 Mbps down.  Now I understand that I should be seeing some impact of having my traffic being back-hauled to our PAN device but this much?  Additionally, when I upload a file from my GP client device to our corporate network, a 12 MB file takes ~6 minutes to upload.  Using our other VPN solution the same task takes 30 seconds.  Anyone else having an experience similar to this or have any answers?  Thanks in advance.


Accepted Solutions
dburns
L4 Transporter

Are you using SSL or IPSEC? I have found throughput much better when using SSL.

Dominic

View solution in original post


All Replies
panos
L6 Presenter

I did not test with speed test or etc sites...But I made another test...

I used GP and I used other vendor ssl vpn(software- no firewall) to same site.

I saw that connection with Gp is very slow.Something should be done to improve that performance...

panos
L6 Presenter

Also I missed that part,

both connection is made on same Lan- Palo alto - Wan topology.So it should be(slowness) related to GP.

dburns
L4 Transporter

Are you using SSL or IPSEC? I have found throughput much better when using SSL.

Dominic

View solution in original post

panos
L6 Presenter

Tested with SSL only.

sspringer
L4 Transporter

The GP client had a performance increase included in 1.2.9 for IPsec traffic.

Perhaps you could give it a try?

legeremt
L0 Member

Thank you all who responded.  When I disabled IPSec my performance increased significantly.  Uploading a 12 MB file to my corporate network now takes 1 minutes instead of 6 minutes.  Are there any disadvantages to using SSL instead of IPSec that anyone know of?

jeanvancaloen
L1 Bithead

+1 for the question regarding IPSec vs SSL. What are the pros and cons?

Thanks

jdelio
Community Team Member

Just wanted to let everyone know that if they are having any GlobalProtect issues, and need to troubleshoot the issue, our Very own @kiwi has written a great blog all about troubleshooting GlobalProtect.

Be sure to check it out here: 
https://live.paloaltonetworks.com/t5/blogs/dotw-globalprotect-troubleshooting-tips/ba-p/383911

LIVEcommunity team member
Stay Secure,
Joe
Don't forget to Like items!
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!