cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Who rated this post

Community Team Member

Hi @krishnarandadath ,

 

If you're doing inspection then SMB download is slow by design.  Check the following article on why SMB is slow and possible workarounds:
https://live.paloaltonetworks.com/t5/community-blogs/why-is-smb-traffic-slow/ba-p/356471

 

The firewall typically pins the entire SMB session to a single DP (Data Plane) CPU core. That core spikes to 100% capacity trying to do deep packet inspection on every single sequential block of the 250 GB file.  As the single CPU core falls behind, the firewall's internal buffers fill up. It starts dropping packets, causing TCP window sizes to collapse. SMB interprets this network congestion by slowing itself down to a crawl to avoid losing data.
 
You can check this using the CLI 'show running resource-monitor':
How to Interpret: show running resource-monitor 
 
As per the blog I shared above try DSRI or app-override (if possible)
 

Kind regards,

LIVEcommunity team member, CISSP
Cheers,
Kiwi
Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.
Who rated this post