About typuckett

Christian: We also just implemented a new PA-2050 with one single VWire interface [two physical ports] to our public 20Mbps Internet connection this past Saturday 1/16/10, and have seen performance issues all week with certain types of content at standard websites.  Same scenario here with no policies set to block or no policies even configured for the VWire "in" or "out" and allow all applications and services in both directions for all networks. Sites such as http://www.lexus.com , http://www.ford.com , and http://www.accuweather.com [just to name a few - dozens identified] struggle and struggle to even completely render the entire page - leaving the user to keep pressing F5 to refresh until finally the page completes. Opened a new Case ID with PA Support in hopes they can find something from the CLI to fix this issue.  The device, in my opinion, simply seems like it is struggling trying to "app-id" these particular websites, and the only way to truly turn off application identification appears to be with a custom application exception rule. Hopefully, more details to follow soon.  The natives are getting restless here, with all the F5 keystrokes we inadvertently added this week by installing the device inline. -Ty ... View more