Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

Understanding Throughput

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Understanding Throughput

L0 Member

i need help with understading how threat prvention throughput works ,i mean for all integrated features(ips,antivrus,..) what is the throughput of each alone ,as in specsheet only total throughput is mentioned 

1 accepted solution

Accepted Solutions

we use single pass parallel processing to process traffic, so that means for a platform that has 4gbps App-ID throughput, an estimated 2gbps will be achieved if all threat prevention (av + ips + fileblocking, ...) is enabled

 

so if the customer requires 2 gbps ips throughput, you would need the PA-3050 to comply with this requirement (the 1gbps AV is included in the 2 gbps throughput)

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

View solution in original post

8 REPLIES 8

Cyber Elite
Cyber Elite

lease take a look at this information : Platform Specifications and Features Summary

 

as a rule of thumb, we estimate total throughput is halved if all bells and whistles are enabled. depending on your actual traffic mox, results may vary slightly

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

ok if customer as example asks for 1Gb antivrius throughput , ips 2Gb,file block 1Gb, throughput ,a threat prevention with total 5gb comply  ?how will i specify antivrus with 1gb and ips with 2?

we use single pass parallel processing to process traffic, so that means for a platform that has 4gbps App-ID throughput, an estimated 2gbps will be achieved if all threat prevention (av + ips + fileblocking, ...) is enabled

 

so if the customer requires 2 gbps ips throughput, you would need the PA-3050 to comply with this requirement (the 1gbps AV is included in the 2 gbps throughput)

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

@reaperIs it possible to track throughput? I came across 'show session info' and 'show session statistic' commands to check for throughput. While 'show session statistics' commands shows aggregated values, it is real time and I have not seen a way to retrieve it programatically.

@Sly_Cooper,

Check out Pan(w)achrome. It can give you the Bitrate and Packet rate for the logical and hardware interfaces in a semi-realtime view. Otherwise you could utilize the API to get this information and essentially rebuild it for yourself, but this is a pre-packaged solution at least. +

@Sly_Cooper

For continuous monitoring including storing these values to get also a historical view you should take a look at snmp and a monitoring software.

Examples are:

@RemoAre you monitoring these values using the software mentioned? Do you know if these are out of the box options or need specific snmp MIB compilation?

@Sly_Cooper

Things like throughput, processorload and used diskspace can be monitored (I assume) with most software out of the box - in other words everything that could be monitored with standard mibs. Values where you need the Paloalto mib (like sessioncount) need at least an import of the mib (in most cases) and in case of PRTG they offer a little tool to convert mibs into the format used by PRTG.

  • 1 accepted solution
  • 6024 Views
  • 8 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!