Hello,   I recently started a new job and have been thrown right into the fire.  Users are complaining about very slow connections from globalprotect.  They get speed tests between 3mbps - 20mbps.  Internet speed from ISP is 500Mbps.  When I attempt from a speed test site, I get a little over 100Mbps off the network but around 20Mbps when I'm on GlobalProtect.  This is not split tunnel.  Globalprotect connections are IPSec VPN   I don't want to jump to conclusions but I believe the issue is inadequate hardware.  Firewall is a PA-3050.  When I check the specs, I see max IPsec throughput is 500Mbps.  There are over 100 users connecting to globalprotect during peak times.  Assuming my understanding is correct, those 100 users are going to be sharing the 500 Mbps throughput?  Plus the profiles attached to the security policy rules (av, threat, url, decryption) add some overhead, I'm not entirely sure how much that would impact though.   The firewall also has some site-to-site VPNs too.  Would Globalprotect share the 500Mbps throughput with those Site-to-Site VPNs too, or is that 500Mbps per tunnel interface?     I've also heard similar complaints from other Palo customers who blame the issue on globalprotect, but I'm not sure if there is truth to that, so I don't want to assume   Any advice would be helpful     ... View more

Hi,   I'm looking to purchase a PA-220 lab unit (lab license) for home.  Basically, using it for labbing with my personal internet/internal traffic.  Are there limitations with that device/license,  such as bandwidth limits ... View more