Hello every one . I try to implement PA-500 on PAN-OS 4.1.6. Then I configure 2 security policies. 1. security policy for deny bittorrent from both direction (Trust and Untrust zone) . 2. security policy for allow all traffic both direction but enable AntiVirus, Spyware, Vulnerability and URL filtering on alert. My environment for implement is Brance ======= 40 MB ======= Data Center Client == Switch ==Palo alto == Router == MPLS VPN COULD == Router == Switch==ACCPAC server Then I try to test use applications found ACCPAC software (accounting software) slowly. After that I check by install bandwidth monitoring software and found the bandwidth behind PA-500 (14 Mbps) differrent in front of PA-500 (26 Mbps) about 12 Mbps at file size 146 MB. I check firewall troughput by command it shown about 30 Mbps. After that I try to disable AntiVirus, Spyware, Vulnerability and URL filtering (for disable threat prevention). Then test use ACCPAC again but result same before disable treat prevention . Then I try to use FTP application upload and down file to same server. I found behind PA-500 down/up speed 20 Mbps and in front of PA-500 down/up speed 39 Mbps. Note: The client machine run on Window XP operating system. Why traffic different between behind and in front of PA-500 in case traffic not over throughput spec? How to fix this problem or other solution for fix it. Manaschai S.
... View more