SFTP slow transfer showing incomplete data in logs.

[Asmita]

Hello everyone.

I am facing an issue when I transfer files via SFTP and SCP is slow when I introduce Palo alto in the path.

Data path: 

Server > Core switch > Palo alto > Fortinet > Internet ( AWS )

Server > Core switch  > Fortinet > Internet ( AWS )

Speed with Palo Alto : 70-150KB/s

Speed without Palo Alto : 600 - 700KB/s

I have created a plain firewall rule on top and also disabled server inspection response. but no luck.

I tried to create an app override policy but that is not getting hit.

All I can see in logs is insufficient data with multiple random ports ( ranging from 33500 to 33550 getting allowed  and when checking the same using session id , i see very less count of L7 application data received.

[BPry]

@Asmita,

Have you checked speed/duplex settings on the interfaces to ensure you don't have a mismatch here? Also what does your application-override entry actually look like?