Speed Test through Palo Alto pair

[leole]

Hello group,

We are in the process to set up and replace the current firewall with PA-4020 pairs . During pre-test, one thing came up. Using several Speed Test sites, the results are not what we expected, particularly the UPLOAD speeds are far off .

It is a big HELP if the group let us know what are your Speed Test results comparing to the expected.

Our set up is L3 ports with everything in AUTO with almost no rules for now, no User ID agents,

Thanks in advance.

Leo Le

[leole]

Hello group,

Thought you would like to know.

After further testing, we would like to clarify about the speed issue. Only the PA with ports set in VWire and it sat behind another firewall .

The speed tests performed in front and behind one of our Production PA pairs showed that no performance degradation at all

The Palo Alto support already took a look into this issue. Case number 00012949.

Leo Le

[mikand]

So when running the PAN in VWire there were a speed degradation but not when running in L3 mode?

[odin]

How were you doing the speed tests?  What about results for the L3 configuration?

[migration]

Could you clarify us how you resolved the issue?

Thanks

[markjx]

I'd like to add a "me too" to this conversation.

We have a 4020 (not an HA pair, just a single) sitting behind a firewall pair (from another vendor) at our Internet gateway.

Today, for about eight hours, we had issues with slow uploads, or total upload blocks, to those Internet speed test sites.  "Normal" traffic seemed OK.  At about 2pm (local), everything got magically better.

I figured it was just a fluke.

What was the root cause for this?

MJ

[migration]

@markjx:

Hi! Which speedtest sites did you try?

Did you have problem only with speedtest site or even with normal HTTP traffic (upload/download)?

Thanks for your answer.

[markjx]

It was actually my co-worker, so I'm not sure exactly which URL's he went to.  I do know that regular HTTP traffic seemed OK.

And, the "upload" speed reported by the two (or three?) site he went to wasn't just slow.  It was actually zero.