Performance issues with a particular site

Announcements

ATTENTION Customers, All Partners and Employees: The Customer Support Portal (CSP) will be undergoing maintenance and unavailable on Saturday, November 7, 2020, from 11 am to 11 pm PST. Please read our blog for more information.

Reply
Highlighted
L1 Bithead

Performance issues with a particular site

Hello,

I'm having some performance issues with a particular site.  I opened a case, but I thought I would pick people's brains here.

I'm working my way backwards from the client out to the edge of our network to see if there's any obvious issues on my end.  Is there any diagnostics or fact finding to determine if my PA3020 is showing any performance or connection problems with a particular website? 

Thanks in advance!

-Ian

Highlighted
L5 Sessionator

Hi,

First use tools like dev tool integrate in Firefox (for exemple), just to know if the perf issue is comming from one object in the page or gloablly from page.

Then, make pcap in Palo (at drop stage) to know if there is, for any reason drops on network.

After that you can:

     disable any profile for bypassing all L7 analyse done by the palo

     Create app overide

     Create dedicate security rule

...

Many test to do :-)

V.

Highlighted
L1 Bithead

Hi Vince,

Thank you for responding.  Do you know if there's something specific to Chrome I can try?  That is the browser that my users are utilizing.  I'll look into the traffic tool as well.  The engineer didn't see anything obvious from the standard tools, but did want to look into some traffic logging for fragmentation errors. 

-Ian

Highlighted
L4 Transporter

Do you have a data filtering profile turned on?  We have experienced issues in the past depending on what regular expressions were used in that.

Other than that, I agree with VinceM , you can either throw the specific site in an override or put a specific rule in for it  that you can remove inspection profiles from to see if a certain one is causing the slowness.

Highlighted
L1 Bithead

I do not have any data filtering rules under objects/data filtering.  Regarding the override, would I be putting that into the Policies/Security section or is there another place to put the site/ip?

Highlighted
L2 Linker

I have also used HTTP debuggers to help isolate this type of issues. Fiddler (www.telerik.com/download/fiddler) and HTTPWatch are the ones I've used in the past.

Highlighted
L4 Transporter

I agree with parmas, Fiddler is a powerful tool to diagnose issues with a website.  This may tell you if the specific site is having problems fetching a specific part.

Highlighted
L4 Transporter

Application Overrides are in a separate policy section.  I would suggest using this to rule out inspection as the reason for the slowness but if you notice it resolves it I would take the override out and test a specific rule for the site where you add inspection profiles back until you find the cause.  Application overrides basically bypass any inspection.

Highlighted
L3 Networker

also try google or ie development tool from the browser. They show a lot of info including timing

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!