Understanding Throughput

Reply
Highlighted
L0 Member

Understanding Throughput

i need help with understading how threat prvention throughput works ,i mean for all integrated features(ips,antivrus,..) what is the throughput of each alone ,as in specsheet only total throughput is mentioned 


Accepted Solutions
Highlighted
L7 Applicator

we use single pass parallel processing to process traffic, so that means for a platform that has 4gbps App-ID throughput, an estimated 2gbps will be achieved if all threat prevention (av + ips + fileblocking, ...) is enabled

 

so if the customer requires 2 gbps ips throughput, you would need the PA-3050 to comply with this requirement (the 1gbps AV is included in the 2 gbps throughput)

Tom Piens - PANgurus.com
Like my answer? check out my book! amazon.com/dp/1789956374

View solution in original post


All Replies
Highlighted
L7 Applicator

lease take a look at this information : Platform Specifications and Features Summary

 

as a rule of thumb, we estimate total throughput is halved if all bells and whistles are enabled. depending on your actual traffic mox, results may vary slightly

Tom Piens - PANgurus.com
Like my answer? check out my book! amazon.com/dp/1789956374
Highlighted
L0 Member

ok if customer as example asks for 1Gb antivrius throughput , ips 2Gb,file block 1Gb, throughput ,a threat prevention with total 5gb comply  ?how will i specify antivrus with 1gb and ips with 2?

Highlighted
L7 Applicator

we use single pass parallel processing to process traffic, so that means for a platform that has 4gbps App-ID throughput, an estimated 2gbps will be achieved if all threat prevention (av + ips + fileblocking, ...) is enabled

 

so if the customer requires 2 gbps ips throughput, you would need the PA-3050 to comply with this requirement (the 1gbps AV is included in the 2 gbps throughput)

Tom Piens - PANgurus.com
Like my answer? check out my book! amazon.com/dp/1789956374

View solution in original post

L4 Transporter

@reaperIs it possible to track throughput? I came across 'show session info' and 'show session statistic' commands to check for throughput. While 'show session statistics' commands shows aggregated values, it is real time and I have not seen a way to retrieve it programatically.

Highlighted
Cyber Elite

@Sly_Cooper,

Check out Pan(w)achrome. It can give you the Bitrate and Packet rate for the logical and hardware interfaces in a semi-realtime view. Otherwise you could utilize the API to get this information and essentially rebuild it for yourself, but this is a pre-packaged solution at least. +

Highlighted
Cyber Elite

@Sly_Cooper

For continuous monitoring including storing these values to get also a historical view you should take a look at snmp and a monitoring software.

Examples are:

Highlighted
L4 Transporter

@vsys_remoAre you monitoring these values using the software mentioned? Do you know if these are out of the box options or need specific snmp MIB compilation?

Highlighted
Cyber Elite

@Sly_Cooper

Things like throughput, processorload and used diskspace can be monitored (I assume) with most software out of the box - in other words everything that could be monitored with standard mibs. Values where you need the Paloalto mib (like sessioncount) need at least an import of the mib (in most cases) and in case of PRTG they offer a little tool to convert mibs into the format used by PRTG.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!