slow ftp log export

[dieter_b]

PA2020.

Exporting logs using ftp seems extremely slow. We are talking about speeds around 30 KB/s, this on a full GB network to a ftp server with fast storage. Logs are big (easily over 10GB) so it would take days to export them.

How can I speed things up ? Is there an alternative (like: using the usb port on the device ?

[npare]

Hi,

The USB ports are currently not in use so that wouldn't work.

If the traffic from the firewall's FTP service route and the FTP server changes zones, it's possible that an anti-virus or QoS policy be applied. That might explain why so little data reaches the FTP server.

That's the first thing I would check, examine the logs to see if traffic from the firewall to the FTP server is matching an AV or a QoS policy.

[rahmant]

Perhaps you can check for a duplex mismatch on the mgmt port?  I remember on the PA-2000 series, there were some issues with link negotiation when plugged into Cisco switches.

[dieter_b]

FTP went through management, so no policies involved.

[dieter_b]

Thanks for putting me in the right direction. Seems like the management port was indeed connected to an older switch on FastEthernet.

Moved it straight to our core switch (Cisco), negotiated fine.

I will do another export to see if (and it should) it's faster.

[dieter_b]

Doesn't seem to be any faster.

Management CPU is probably the bottleneck, seeing it being maxed out during transfer and responding slower than usual to commands.

Any way to force the export over a normal interface ? Data plane should be more powerful I guess...

[mikand]

Check in service route configuration (Device > Setup > Services, click on Service Route Configuration) if you can reroute just the uploads to use a specific dataplane interface instead of the mgmt-interface.

[dieter_b]

I already checked that, there is no "upload" service to configure.