For example host an iperf3 server with NAT / PAT, then from your home do a tcp iperf test, in order to establish a baseline, of 'unencapsulated' stream.
The other thing I would say is set a baseline without globalprotect. I'll do another speed test to NYC, to mimic to 5220, when connected to the 5220 I get around ~65% of my speeds when connected to Global Protect in NYC. If you are not sure if you have 32 or 64 bit Windows, you can check by opening the Settings app and navigating to System/About. Click Run to run the file as soon as it is done downloading. I'll do one test o Ashburn (To mimic Azure Connection) and I get around 98% of my speed when when connected to Global Protect in Azure. Click either Download Windows 32 bit GlobalProtect agent or Download Windows 64 bit GlobalProtect agent. In azure I think we have them around 1360 (can't remember off the top of my head). We run a lower MTU on our internet connections due to the GRE overhead, we keep tunnel interfaces around 1305. These 1gb connections run in a GRE tunnel to a CDN for DDOS protection. I have a PA VM-300 in Azure US East, and a PA-5220 in New York multiple 1gb connections running ECMP. NOTE: This software will be available on eRaider Software Downloads starting December 5, 2018.
This can happen for several reasons, as a few others have said, I would look at MTU, a long with Internet Exchange peerings. How to: Download and install GlobalProtect for TTUnet VPN on Windows Details 1) Download GlobalProtect from your eRaider Software Downloads. PANW - Press Releases & Public Statements.
We are not officially supported by Palo Alto networks, or any of it's employees, however all are welcome to join and help each other on a journey to a more secure tomorrow.ĭo you have support related questions? Check the Support Site Company Information This subredditt is for those that administer, support, or want to learn more about Palo Alto Networks firewalls.