04-16-2018 10:30 AM
I want to measure https throughput to decide the sizing for decryption. what is the most effective commn=and to dispaly the stats?
TIA
04-17-2018 07:12 AM
Hi @SThatipelly
As already mentionned by @BPry in your other topic (https://live.paloaltonetworks.com/t5/General-Topics/How-to-view-active-ssl-sessions/td-p/209843/jump...) the ACC tab is a quick and easy method to estimate the throughput. But instead only filtering for the app ssl, I would set the filter to 443. But keep in mind that ACC only aggregates the traffic when sessions ended. So if you have an ssl session that was open for days and transfered quite a few gigabytes, you will see a peak in traffic at that time when the session ended. So you need to divide the total amount of traffic by the amount of time to get an average of ssl throughput.
If you really want to know the actual throughput it will get a little more complex and requires QoS (without setting additional limits) and a script that pulls data periodically (every 10 seconds for example) from the XML API. But this way you will be able to get almost the actual throughput for decrypted traffic.
Regards,
Remo
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
