Port Translation very slow

Announcements

ATTENTION Customers, All Partners and Employees: The Customer Support Portal (CSP) will be undergoing maintenance and unavailable on Saturday, November 7, 2020, from 11 am to 11 pm PST. Please read our blog for more information.

Reply
Highlighted
L4 Transporter

Port Translation very slow

Hello,

 

We setup a inbound NAT to direct port 443 to a server on-site on 10.x.x.x and it all worked fine and fast - then it turned out we needed to adjust it to port 4443 as the customer was using port 443 for inbound client VPN connections of course.
 
Anyway, after I adjusted the NAT inbound for this one rule (a simple change of 443 to 4443) - the whole access method slowed down using port 4443 to the point where it is unusable / not responding.
 
We thought this might be because port 4443, so I tested with 2100 - same result - but the same rule with 443 redirected is fine and fast - 
 
Can someone please advise why this is going so slow when not using the port 443 as the standard inbound NAT to this web server?
Highlighted
L7 Applicator

from a NAT perspective, this should not matter

have you been able to run packetcapturesin front and behind the firewall to see where delays are introduced?

Tom Piens - PANgurus.com
New to PAN-OS or getting ready to take the PCNSE? check out amazon.com/dp/1789956374
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!