Good Morning Everyone
We recently installed a new PA-500 with OS 3.1.4 loaded. URL Filtering was disabled. After enabling URL filtering internet speed degarded to the point of it takes 10min to open a site like google.... hiting refresh once or twice will open the site imediatly without any problems. Sometimes sites only gets loaded half. After reading multiple discusion I upgraded the OS to 4.0.3. The problem still exists....
Internet bandwidth is not saturated. (first thing i checked)
URL filtering is only set to alert by default onto the Inbound and Outbound policies. The only other policies is to block social networking applications.
What are we doing wrong?
Thank you in advance!
Good Morning Lardsa
At the moment it is a mix of sites (SSL and normal HTTP). It is not site specific, thats the weird part of it. I am allmost at the point of removing URL filtering (inluding the license) to see if Internet speeds restores! I hope PA support can asisist before I go to such extreame.
Busy checking on the SSL decryption (thanx)
Also note that if you have Dynamic URL filtering box enabled in your URL Filtering profile, it can lead to big slowdowns if your PA Management IP is not allowed to get updates from Bightcloud directly (5 seconds timeout). I experienced it myself.
You will see "Dynamic URL Filtering" if it is enabled under the URL Security Profile Object
->"URL Object" - there is a tick box there.
It could be possible that the management interface does not have connectivity to get updates.
I can confirm that Dynamic URL Filtering is not ticked and I have ensured that my management IP has full internet access. Not using any proxies! Problem still exists.......
Thanx for the assistance anyway
Can you give a little more info in regards to the size of your network behind the PA500? How many web users, etc... We are using a 4020 with URL filtering and don't have any performance issues with about 800 internet users. But I realize a 4020 has quite a bit more horsepower than a PA-500.
Sounds like a call to tech support might be good for this one, If you haven't called them already. Please let us know what you find out. I am considering a PA500 for some of our smaller remote sites so any info / feedback you have would be great.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!