Pan(w)achrome - interface speed differences

[craigmueller]

Hello,

I just started using Pan(w)achrome, version 0.7.1.5.

So far, it has some useful information.

I am trying to figure out why I have such a difference between my external interface receive rate (1.3+ Gbps) and my internal interface transmit rate (~300 Mbps).

The internal receive and external transmit have the same bitrate (packet rate is off by about 1%).

I understand that inbound I am blocking traffic and that would account for some difference in the rates, but this seems like a big drop.

Is there a way to see a blocked rate of traffic (rule and/or threats) ?

Thanks!

[HULK]

Hello Craig,

I would recommend you to implement QOS on this PAN firewall to monitor the actual bandwidth. You may compare the value between Pan(w)achrome and QOS.

QoS in PAN-OS 4.1

Thanks

[mivaldi]

For that, the following document may be useful

Graphic Traffic Monitoring for Interfaces - QoS Statistics

Your packets may be exiting different interfaces.