Issu Connection Internet

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Issu Connection Internet

L0 Member

In Palo Alto PA-220

We implemented a GlobalProtect VPN setup and a Palo Alto version 10 firmware upgrade
After one month of implementing GP and upgrading PAN OS Version 10, our internet connection was slow
Internet traffic is always high
High CPU Device Load
Is this problem caused by:
GlobalProtect VPN implementation
Upgrade firmware

Please get information from all your colleagues

2 REPLIES 2

Cyber Elite
Cyber Elite

it may be related to how you're using your device

what is the output of `show session info`, does the number of active sessions look high, is the packets per second exceptionally high?

since this is a pa-220, are you making heavy use of ssl decryption or QoS?

did you oimplement GlobalProtect using IPSec or ssl? (IPSec is faster and causes less load)

 

 

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

On palo alto no SSL or QOS is used
just blocking filtering and applying global protect using IPSec

  • 307 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!