Re: Palo Alto throughputs?

[Jon Robinson <jon () DIGITALSCEPTER COM>]

I have a couple PA-500 customers that you can compare with and can make introductions if you want to contact me off 
list:

A 1600 machine district pushing up to 45Mbps without problems, using it in vwire with threat and URL subscriptions.
A 600 user district using it in L3 mode with all subscriptions with one connection to K20 and another to comcast.  I 
think they only push around 20Mbps or so.  I asked them for the results to "show system statistics" and will send them 
to you.

PAN's own rule of thumb say that the PA-500 is for 30 users or less at a branch or something.  The main sizing 
parameters are sessions and throughput, but there are other counters and numbers you can check.  Run some of the 
following to get a feel for how it's running on your network:

show running resource-monitor
show session info
debug dataplane pool statistics
show counter global filter aspect resource
show system statistics

There are others as well to look for errors, drops and fragments.

Jon Robinson, CISSP
Digital Scepter
desk 951.461.7868
digitalscepter.com




On Mar 15, 2012, at 4:41 PM, Bob Williamson wrote:

> I am looking at a PA-500 and am a bit concerned about the throughput of the unit.  Anyone have one and if so, what’s 
> the highest throughput you’ve seen?
>  
> Thanks,
> Bob Williamson
> Network Administrator
> Annie Wright Schools | 827 N Tacoma Ave, Tacoma, WA 98403 | www.aw.org
> D: +1.253.284.5465 | F: +1.253.572.3616 | Bob_Williamson () aw org
>  
> Annie Wright's strong community cultivates individual learners to become
> well-educated, creative, and responsible citizens for a global society.
>  
> <image001.png>  <image002.png>  <image003.png>
>