This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Cookie Policy. Click Preferences to customize your cookie settings.
Limitation IPsec VPN performance
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- Discussions
- General Topics
- Re: iRe: Limitation IPsec VPN performance
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
Options
- Mark as New
- Subscribe to RSS Feed
- Permalink
05-02-2016 03:55 AM
Hello
I have 2 PA-500 in active-passive mode (Pan-os 6.1.0)
In the model specification PA-500 shows that "IPsec VPN performance" is 50 Mbps.
I want to make an IPSec VPN tunnel with a cloud provider. The speed that gives me supplier for the tunnel is 100 Mpbs guaranteed.
Does this mean that my connection with cloud provider may not exceed 50 Mbps?
Can you clarify a little more what it means "IPsec VPN performance"?
Thank you
8 REPLIES 8
Options
- Mark as New
- Subscribe to RSS Feed
- Permalink
05-03-2016 08:30 AM
Hi,
I just saw on Cacti graphs that we are reaching with our supplier cloud an output of 80 mbps.
Our line is 80 mbps simétric.
So I can not finish to understand because it brings more performance if it is limited to 50Mbps.
The tunnel is DES encryption.
Can you clarify this?
Thank you
Options
- Mark as New
- Subscribe to RSS Feed
- Permalink
05-03-2016 09:18 AM - edited 05-03-2016 09:19 AM
Palo Alto uses small 64k packet size when they put together their datasheet (worst case cenario).
Many competitors use large packets (best case cenario) in their datasheets.
For that reason you often get better performance with Palo than advertised.
Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011
Palo Alto Networks certified from 2011
Options
- Mark as New
- Subscribe to RSS Feed
- Permalink
05-03-2016 09:20 AM
By the way DES is not secure to use nowadays.
Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011
Palo Alto Networks certified from 2011
Options
- Mark as New
- Subscribe to RSS Feed
- Permalink
05-05-2016 12:28 AM
Declared throughput is not limit. It's guaranteed.
Related Content
- PA-5250 Migration to Virtual Appliance and EoL Status in General Topics
- Hitting IPsec Tunnel Limit on M-300 in VM-Series in the Public Cloud
- IPSec tunnel slowness issue in General Topics
- IKEv2 IPv6 tunnel with dynamic endpoint from one IP in General Topics
- Knowledge sharing: Globalprotect troubleshooting/investgation. Split tunnel,Globalprotect app/agent configuration options and etc. to solve issues in General Topics
Like what you see?
Show your appreciation!
Click Like if a post is helpful to you or if you just want to show your support.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks