Slow SMB performance when GlobalProtect is connected
8614
Created On 06/27/23 10:24 AM - Last Modified 07/22/25 05:19 AM
Symptom
SMB traffic is going out through GP adapter even though the SMB server is on the local network.
Environment
- Palo Alto Firewalls
- Prisma Access
- GlobalProtect (GP) App
- SMB Server
Cause
- SMB Multichannel enables file servers to use multiple network connections simultaneously.
- It facilitates aggregation of network bandwidth and network fault tolerance when multiple paths are available between the SMB 3.0 client and the SMB 3.0 server.
- This capability allows server applications to take full advantage of all available network bandwidth and makes them resilient to network failures.
- When SMB Multichannel is enabled, the SMB protocol attempts to send the traffic across all available interfaces (including \GP adapter) which causes the performance issues.
Resolution
Disable the multichannel on the client or server to resolve the issue using following commands in Windows PowerShell:
- Disable SMB Multichannel on the server side:
| Set-SmbServerConfiguration -EnableMultiChannel $false |
- Disable SMB Multichannel on the client side:
| Set-SmbClientConfiguration -EnableMultiChannel $false |