telnet with EBCDIC encoding

[oshcomp]

We are having some issues with IBM telnet (tn3270) through a PA-200.  The telnet sessions are very sluggish.  I had to remove the firewall to restore performance.  The telnet is using EBCDIC encoding.  I had been specifying a security policy using the application telnet.  When I get a chance I will change that to service port 23 and test again.  Hopefully performance will improve if the application is not being analyzed.  I don't know how PA handles EBCDIC.  Has anyone else had issue with IBM telnet?

Thanks

[sraghunandan]

Can you try using app-override to see if it improves performance https://live.paloaltonetworks.com/docs/DOC-2816

[oshcomp]

Good suggestion.  I will give that a try.

[mbutt]

Like suggested by sraghunandan you should definitely try app override.Below is what happens when you do app override

Issue

• The Palo Alto Networks device is classifying traffic as "Unknown-TCP" or "Unknown-UDP".
• A custom application override is created and applied to a rule to re-categorize the traffic.
• The traffic is now properly identified but there is no URL filtering applied to the traffic falling under that rule.

Resolution

This is normal behavior.  A rule with a custom application override does not pass through any of the URL, threat or anti-virus scanning engines.  The scanning engine will be used with an app-override if you use an existing built-in application such as web-browsing.

See also

How to Create an Application Override

The above information can be accessed on the following link as well.

https://live.paloaltonetworks.com/docs/DOC-1343

Let us know if this helps. Thanks

[mikand]

Being "sluggish" sounds more like a routing issue or mismatched speed/duplex for one or more interfaces of your PA (which results in retransmits, lost packets etc).

[PanIst]

did you try app override yet ?