10-04-2022 11:22 PM - edited 10-04-2022 11:39 PM
We are deploying new PA-410,450,440 in remote location. From Head office firewall to Remote location there is an IPsec vpn.
When users from HO try to access PA-410 firewall over GUI it took 10 - 15 minutes to load. During this GUI loading data plane interface latency increases for example if i try ping servers in HO location from LAN inside PA-410 normally its 20 ms when Loading firewall GUI it increases to 600 MS . Also firewall If latency increases over vpn while accessing GUI. In local network there is no latency firewall GUI is loading normal.
CPU,MGT plane and CPU plan are below 20 % and there is no issue found in counters as well. We tried restarting web-MGMT server which doesn't help. Also there is no issue with CTD demon.
Tried changing MTU to 1200 and also enabled Jumbo frames . There is no error with encap in counters as well.
10-07-2022 08:06 AM
This would be a good web case for PANW TAC to see and escalate to their engineering team.
02-09-2024 07:43 AM
I've been having this same issue on all appliances we've deployed over IPSec. When accessing the GUI of 440s/1410s/1420's over a tunnel (palo-palo) the latency is extensive. Working with support, we took pcaps, changed MTU/MSS but never reached a conclusion. The oddity is the issue does not happen when we're logged into Panorama and use that to jump to a managed gateway gui.
Did you ever receive a resolution to this?
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
