07-23-2014 07:52 PM
I would like to seek your help in determining the exact threat prevention through of a specific deployed PA machine.
I've been going around the forum and checking tech guides but i couldn't find one.
This for the reason of right sizing and to verify if a machine deployed could still be able to handle the network traffic.
Or if you have any suggestion on this, that would help us a lot.
Thank you very much!
07-23-2014 11:49 PM
07-24-2014 12:49 AM
Thank you for that information. but that is not exactly what we're looking for, but thank you for giving this info.
What i meant is the actual running threat prevention that is being consumed by a network on a PA device.
Is there a CLI Command for this? or a way to somehow verify its data.
Sorry for the misleading information.
07-24-2014 12:59 AM
You could check the current throughput of the PAN firewall with below mentioned CLI command:
> show system statistics session >>>>>>>>>>>>>>>>>>>> It will show you the current session statistics ( throughput)
Device is up : 6 days 5 hours 5 mins 25 sec
Packet rate : 52/s
Throughput : 302 Kbps >>>>>>>>>>>> Runtime value
Total active sessions : 5
Active TCP sessions : 0
Active UDP sessions : 5
Active ICMP sessions : 0
Let me know,if this is what you are looking for.
07-24-2014 04:14 PM
There is no direct command to show the threat prevention throughput because it is basically just throughput of the device with some default profiles like AV, anti-spyware, vulnerability protection etc. This value has already been calculated and published at Product Selection
It is best to see the throughput of the device itself with the command "show system statistics session" which tells the current throughput value under operating conditions with your configuration subject to the amount of traffic going through firewall at that moment.
To improve performance you may disable DSRI or Disable Server Response Inspection. With DSRI turned on, server response traffic is not inspected, which will increase the throughput capacity. Obviously, enabling this feature is only recommended for trusted servers. References:
Threat Prevention Deployment Tech Note
Let us know if you have any questions.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!