This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About mikand
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About mikand
1449Posts
492Likes
85Solutions
Last Visited
User
Activity
User
Profile
Latest posts by mikand
| Subject | Views | Posted |
|---|---|---|
| 2218 | 09-08-2016 03:58 PM | |
| 3623 | 09-07-2016 11:05 AM | |
| 3504 | 09-07-2016 11:01 AM | |
| 1419 | 09-07-2016 10:57 AM | |
| 2241 | 09-07-2016 10:37 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 11-29-2012 12:03 PM | |
| 1 Like | 09-10-2012 03:16 PM | |
| 1 Like | 06-01-2012 11:39 AM | |
| 1 Like | 04-17-2012 10:41 PM | |
| 1 Like | 02-28-2012 11:57 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 3 Likes |
User Badges
Community Statistics
| Member Since | 03-30-2010 08:39 AM |
| Date Last Visited | |
| Posts | 1,449 |
| Total Likes Received | 492 |
09-08-2016
03:58 PM
What about the performance for IPsec vs what PA themself states in the datasheets for each model? As seen for PA-200 the actual throughput is 4-5x the numbers specified in the datasheet but what about the other models (since PA-200 is a bit odd which uses one x86 for its dataplane and no hardware offloading)?
... View more
09-07-2016
11:05 AM
I have asked in this kb but it seems like you should enable "Adjust TCP MSS" on the external physical interface to get optimal performance (and in your internal network makre sure you dont drop PMTU (path mtu discovery)): https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Improve-Performance-for-IPSec-Traffic/ta-p/53301
... View more
09-07-2016
11:01 AM
As I (currently 😉 understand it "repeat count" is a single log entry but it informs that the same event occured x number of times within 5 seconds (like lets say you get a DDoS of incoming junk, instead of log each and every session you only log a few entries but inform that this happend x number of times - basically to save mgmtplane resources but mainly logspace). Count is the number of log entries (rows) you have located.
... View more
09-07-2016
10:57 AM
I dont see why this would be an issue. Did you experience something bad when doing so?
... View more
09-07-2016
10:37 AM
Im looking for those with reallife experience from running site-to-site VPN with PA devices both pro (good) and con (bad) stuff that might float up to the surface. How is the reliability, how is the performance, how is the troubleshooting (if any) etc? For example looking at this test http://blog.webernetz.net/2016/07/26/palo-alto-vpn-speedtests/ using PA-200 it shows an average of (give or take) 198-271Mbps (depending on cipher being used) with IPsec while the datasheet for PA-200 says 50Mbps IPsec. Can you assume the same (4-5x compared to the datasheet numbers) for lets say the PA-3000 and PA-5000 (and while we are at it the PA-7000 too) series who in the datasheet says 500Mbps (PA-3000) for IPsec (that is this would actually mean it (PA-3000) would be able to handle 2-2.5Gbps of IPsec in other terms "wirespeed" on a 1Gbps full duplex uplink)? Does perhaps PA themselfs have some numbers that can be provided in this community forum or for that matter any of the forum members who might have somewhat fresh numbers mainly on the performance figures and which ciphers and PA-model you were using? Also are there any performance recommendations (when it comes to IPsec and PA) other than the obvious one to enable "Adjust TCP MSS" as described in https://live.paloaltonetworks.com/t5/Management-Articles/IPSec-and-tunneling-resource-list/ta-p/67721 ?
... View more
Contact Me
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks