03-09-2018 06:21 AM
Hello all...I have a newly installed HA pair of PA-820. Our ISP circuit is 50Mbps/50Mbps. Testing from a LAN pc, I am only able to download a max of 14Mbps using speedtest.net or speakeasy.net. I have called Palo Alto support and they suggested setting up QOS on my WAN interface and setting the speed to 50Mbps on the interface.
The slow downloads occur if I have av, spyware, etc on or off.
Any thoughts?
03-12-2018 12:12 AM
50Mbps for the PA820 with all feature enable it's easy work for CPUs
I would investigate the network configuration and the negotiation interfaces.
03-12-2018 07:57 AM
Thanks for your feedback. The interfaces check out and don't show errors. Also, my upload speed is fine.
I plug in a laptop tot he same ISP switch and get full download and upload speeds. It is only when connecting through the Palo Alto that I get slow download speeds.
03-12-2018 08:06 AM
Hello,
I am assuming you have checked the speed/duplex configurations on both the ISP device and PAN?
Regards,
03-13-2018 08:31 AM
Yes, the interfaces look good. All hard coded at 100Mbps Full.
No itnerface errors.
03-13-2018 10:09 AM
Hello,
I am going to assume you mean hard coded on both sides, the PAN and other interface?
Regards,
03-13-2018 10:49 AM
Yes, both side of the PAN. All involved interfaces have been checked.
03-13-2018 11:38 AM
Hmm, perhaps its time to open a support case?
03-13-2018 11:39 AM
True. I have had a case open for 10 days. Their solution is to enable QOS? Not sure how this makes sense.
05-07-2018 01:45 AM
speedtest.net is weird. Because of having the PA hanging between it will show very bad results, i guess it has to do with how speedtest determines throughput. I have created an extra policy that excepts speedtest.net from any scanning. Since AppID on speedtest is currently incomplete (paypload is not recognized) i created a custom appID for it (http header looking for speedtest). It now shows desired (full) bandwith. Use nperf.com instead if you don't want to create a policy for that.
TL;DR don't trust speedtest.net results when using PA security on it. Use nperf.com instead.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
