Slow SMB Transfer (and everything else slow) over Global Protect VPN

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Slow SMB Transfer (and everything else slow) over Global Protect VPN

L7 Applicator

Hi community

 

Do you also have issues with low transferrates over globalprotect VPN? And maybe already have a solution for this?

 

I tested the following setup

  1. Client connected with GBit LAN to the internal network without VPN
  2. Client connected with Gbit LAN to the GP gateway
  3. Client connected to the internal network with MTU set to 1400 (like with GP) and Bandwidth limited with a WAN simulator to 200 Mbit and a delay of 6 ms in both directions
  4. Client connected to the GP gateway with a Bandwidth of max 200 Mbit and a delay of 6 ms in both directions

Without Globalprotect my tests with iperf and SMB always show that every available bit of bandwith is used for the transfers. As soon as I am connected to Globalprotect the tranferrates drop - in some cases dramatically. The worst was with GP connected on the Gbit link. With SMB I was only able to copy (large) files with max 6 MByte/s.

 

Globalprotect version used is 5.0.5.

 

Any help is really appreciated!

Regards,

Remo

3 REPLIES 3

L7 Applicator

Hey @Remo ,

Hate to hear whenever you have slow thruput with GP..  Do you have any restrictive policies in place? 

Can you test with an "Allow" policy and see if that changes anything? or do you think that the fact that the traffic has to traverse your work network to get anywhere is causing the slow thruput?

LIVEcommunity team member
Stay Secure,
Joe
Don't forget to Like items if a post is helpful to you!

L6 Presenter

Just incase anyone is interested, a Blog has been written to help with this topic here:

https://live.paloaltonetworks.com/t5/blogs/why-is-smb-traffic-slow/bc-p/357967

 

Be sure to check it out.

LIVEcommunity team member
Stay Secure,
Joe
Don't forget to Like items if a post is helpful to you!
  • 9672 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!