03-15-2023 03:40 PM
Have two Firewalls setup in azure with LB on the trust interface side and no LB on the untrust side. I am experiencing slow web page load times. Sometimes it doesnt even load or loads parts of the page. Any ideas what could be causing this?
03-22-2023 03:33 AM - edited 03-22-2023 03:40 AM
Did you test dissabling SSL decryption for the page as VM machines are not good with this?
Also did you check the VM for HIGH CPU or memory?
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRTCA0
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PNtHCAW
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClUb
Also I had simiar issue "I have seen for example on a small firewall when the customer enables SSL decryption that the counters for work groups "ecdhe_key_gen", "flow_host " etc. jump. This may show that the firewall can't handle the ssl decryption or that there is an SSL DDOS attack".
See:
03-22-2023 04:47 AM - edited 03-22-2023 05:20 AM
Also just in case check your DOS logs as the DOS profile and Zone protection profile could cause such issues in rare cases:
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClOKCA0
https://live.paloaltonetworks.com/t5/general-topics/why-i-see-no-logs-for-dos-policies/td-p/387805
Check just in case this article and check if the Azure LB is redistibuting correcly the traffic between the firewalls:
And just in case see the URL filtering logs but as page loads sometimes I do not think the issue is there:
03-23-2023 12:07 AM
I forgot to add that you can use the new palo alto AIOps feature to check the firewall. The feature supports streaming data to the Palo Alto cloud or uploading tech support file:
https://live.paloaltonetworks.com/t5/blogs/announcing-aiops-for-ngfw-2-5/ba-p/523963
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
