Network Throughput Graphs are incoherent in PA-220

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
Palo Alto Networks Approved
Palo Alto Networks Approved
Community Expert Verified
Community Expert Verified

Network Throughput Graphs are incoherent in PA-220

L1 Bithead

Hi, 

 

We are experiencing an issue with the PA-220 network graphs displayed in one of our sites. 

 

We know that the router in front of the firewall delivers a 90 Mbps (Megabit per second) max throughput. This measure has been verified extensively. 

 

However when trying to visualize the traffic received by our test machine from the firewall web GUI, we notice some extremely high values in the hundreds of MegaBytes.

 

This test machine is connected to the PA through a single NIC card, and the test consisted in a standard online bandwith test service.

 

For instance at 15:00, according to the graph below our machine would have received roughly 550 MBytes of data in 1 second ? That's just impossible ...

 

How am I supposed to read this graph and could there be an issue with the scale ? 

 

This is the Network Monitor graph for the test machine : ( TBN that we get similar values when using the Ingress/Egress Interface Widget Graph from the ACC and filter using the same IP)

 

f4lkon_0-1677147475652.png

 

As a side comparison when we extract the bitrate graph associated with the interface used for internet communication on this firewall, from the Panorama we get something that is much more coherent : 

 

Here we get a max throughput of roughly 9 MBytes which translates to 72 Mbps, it makes sens.

 

f4lkon_1-1677148310474.png

 

Any help on this matter would be greatly appreciated !

 

Thanks,

1 accepted solution

Accepted Solutions

Hi @O.ELHANCHI ,

Note the Network Monitor graph time scale - it is one hour. This graph doesn't present throughput, but rather accumulated volume of data for one hour related to this address. This should include downloaded and uploaded data for one hour.

So the proper way to read the graph is - "550MByes of data for 1hour"

 

You may found the following useful for determining the current throughput:

Graphic Traffic Monitoring for Interfaces - QoS Statistics - Knowledge Base - Palo Alto Networks

How to Check Throughput of Interfaces - Knowledge Base - Palo Alto Networks

View solution in original post

3 REPLIES 3

Hi @O.ELHANCHI ,

Note the Network Monitor graph time scale - it is one hour. This graph doesn't present throughput, but rather accumulated volume of data for one hour related to this address. This should include downloaded and uploaded data for one hour.

So the proper way to read the graph is - "550MByes of data for 1hour"

 

You may found the following useful for determining the current throughput:

Graphic Traffic Monitoring for Interfaces - QoS Statistics - Knowledge Base - Palo Alto Networks

How to Check Throughput of Interfaces - Knowledge Base - Palo Alto Networks

@aleksandar.astardzhiev 

Thank you very much for this excellent answer.

 

As we found the QoS real-time bandwidth graph extremely valuable, we went ahead and asked the Palo Alto support if it was possible to extract a 24 hour or more history of this graph, however, it seems like this feature hasn't been implemented in the PA-220 as of version 9.1.12-h3.

 

I wonder if you would happen to know more about this annex question ?

 

Hi @O.ELHANCHI ,

Unfortunately I am not aware of any way to get the QoS graph for 24hour period.

You already have experience with the data that Panorama -> Managed Devices -> Health can provide.

Other option would be external SNMP monitoring system.

  • 1 accepted solution
  • 1728 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!