Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

PAN VM series throughput

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

PAN VM series throughput

L4 Transporter

Is the throughput on the PAN VM series an arbitrary cap set by the PAN software?

It seems that it certainly shouldn't be on the hardware side as one could do 10gb netorking, put it on SSD and throw as much ram/cpu at is as they desired. And I would think it's not a software 'limitation' since the PAN 3000s and up go well above 600mbps.

1 accepted solution

Accepted Solutions

L7 Applicator

There is no hard-set cap on VM-Series performance.  Performance is dictated by the resources you allocate to the virtual firewall.  The performance numbers on the datasheet were generated using 4 CPU cores, although it is not mentioned which processor family/speed, etc.  Your mileage will vary depending on the # of CPU cores and how fast those cores are. 

Expect to see a difference in performance between a VM-Series with 8 "general purpose" Intel CPU cores, and a PA-5060 which has dedicated network processors, FPGAs, and 36 security processor cores. 

View solution in original post

2 REPLIES 2

L7 Applicator

There is no hard-set cap on VM-Series performance.  Performance is dictated by the resources you allocate to the virtual firewall.  The performance numbers on the datasheet were generated using 4 CPU cores, although it is not mentioned which processor family/speed, etc.  Your mileage will vary depending on the # of CPU cores and how fast those cores are. 

Expect to see a difference in performance between a VM-Series with 8 "general purpose" Intel CPU cores, and a PA-5060 which has dedicated network processors, FPGAs, and 36 security processor cores. 

L7 Applicator

Also remember that if you are looking for the higher performance make sure your v-switch port inside the hyper-visor supports what you want the VM series to process.

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center
  • 1 accepted solution
  • 2927 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!