11-29-2023 07:58 PM
In Palo Alto PA-220
We implemented a GlobalProtect VPN setup and a Palo Alto version 10 firmware upgrade
After one month of implementing GP and upgrading PAN OS Version 10, our internet connection was slow
Internet traffic is always high
High CPU Device Load
Is this problem caused by:
GlobalProtect VPN implementation
Upgrade firmware
Please get information from all your colleagues
11-30-2023 05:54 AM
it may be related to how you're using your device
what is the output of `show session info`, does the number of active sessions look high, is the packets per second exceptionally high?
since this is a pa-220, are you making heavy use of ssl decryption or QoS?
did you oimplement GlobalProtect using IPSec or ssl? (IPSec is faster and causes less load)
12-01-2023 08:09 AM
On palo alto no SSL or QOS is used
just blocking filtering and applying global protect using IPSec
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
