How to measure live https throughput?

[SThatipelly]

I want to measure https throughput to decide the sizing for decryption. what is the most effective commn=and to dispaly the stats?

TIA

[Remo]

Hi @SThatipelly

 As already mentionned by @BPry in your other topic (https://live.paloaltonetworks.com/t5/General-Topics/How-to-view-active-ssl-sessions/td-p/209843/jump...) the ACC tab is a quick and easy method to estimate the throughput. But instead only filtering for the app ssl, I would set the filter to 443. But keep in mind that ACC only aggregates the traffic when sessions ended. So if you have an ssl session that was open for days and transfered quite a few gigabytes, you will see a peak in traffic at that time when the session ended. So you need to divide the total amount of traffic by the amount of time to get an average of ssl throughput.

If you really want to know the actual throughput it will get a little more complex and requires QoS (without setting additional limits) and a script that pulls data periodically (every 10 seconds for example) from the XML API. But this way you will be able to get almost the actual throughput for decrypted traffic.

Regards,

Remo