How can we see/monitor firewall throughput? not of interfaces
cancel
Showing results for 
Search instead for 
Did you mean: 

How can we see/monitor firewall throughput? not of interfaces

L4 Transporter

Is there a way to check/monitor PA advertised throughput values for the following. Now since the new firewalls are out, PA sales are pitching for upgrades and management wants to know the numbers.

 

App-ID firewall throughput
Threat prevention throughput 
IPSec VPN throughput
Connections per second

3 REPLIES 3

Cyber Elite
Cyber Elite

@raji_toor,

SO the only way that the firewall would actually account for this on its own would be through DP values, or you could simply utilize a sole 10Gig interface as testing and flood that interface. From personal testing though Palo Alto's published numbers are pretty much exactly what you're going to get. 

@BPry I don't want to test i want to see/monitor current use of these values. So if you have tested firewall for these numbers, how did you do it. What commands reveal these numbers/values.

@raji_toor,

You literally measure the throughput of the device with that feature enabled, generally with a set packet size. That's why you won't really be able to measure this on a set box. These numbers are generated with the set feature turned on using a set packet size and throughput is measured until you max the box. Then those numbers are published. 

 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!