Prisma Access Internet Break-out in prisma / aggregate bandwith.

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Prisma Access Internet Break-out in prisma / aggregate bandwith.

L2 Linker



My first question regarding the aggregate bandwith feature. 

For example on computer location i will assing 100 Mbit of traffic. 

At the Guaranteed bandwith ratio I will put in 100% and reserved for Guaranteed bandwidth i also put in 100.

So if i have 5 sites they will all receive a guaranteed 20 Mbps.  

Suppose all sites together are only consuming 20 Mbps will they still be able to peak to 100Mbps and use what others have not consumed?


My QOS profiles are still on Mbps due to migration and should be migrated to percentage.


When I want those 5 sites to break out to the internet on Prisma Access computer location how is this reflected in the QOS.

Or does the QOS not apply to internet traffic only between remote sites?

What is the internet break out speed on a computer location?


When I run a speedtest to the internet with above settings I can reach around 170 Mbps down and 20 Mbps up this doesn't seem to match the conigured QOS.  (when i turn to overal bandwith to 50 Mbps for example i can still reach the same speed to internet).

Also when running iperf between a server in a remote location and a server in our service connection i doesn't seem to reflect the settings.


Any help on explaining this would be appreciated.





Cyber Elite
Cyber Elite

Any guarantees can be surpassed whenever 'excess' is available from other sites not using their capacity

The RN-SPN "internet speed" is physically much higher than the capacity you assign to the node, and will generally be able to surpass your allocation by 10% according to the documentation but in reality i've also seen higher results. I'd not 'trust' on the bonus to go unnoticed if you start bursting all the time, a sales person might come knocking to sell you more capacity 😉


QoS is applied on egress ('from' the RN), but you need to create a QoS profile to define classes and then define what those classes include via policy


Tom Piens
PANgurus - SASE and Strata specialist; (co)managed services, VAR and consultancy
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!