Error:
An unexpected error occurred. Please click Reload to try again.
Error:
An unexpected error occurred. Please click Reload to try again.
How to get accurate download speed for performance troubleshoot... - Knowledge Base - Palo Alto Networks

How to get accurate download speed for performance troubleshooting in Prisma Access

7102
Created On 05/12/23 08:13 AM - Last Modified 02/10/25 22:02 PM


Objective


To leveraging online speed test by using  azure speed website.

Environment


  • Prisma Access
  • Azure Speed test


Procedure


Performance degradation should be tested with/without Prisma Access to understand bad and good scenarios.

Procedure of Azure speed test with Prisma Access:
  1. Determine location of user/s having performance issue
  2. On website https://www.azurespeed.com/Azure/Download , select the closest compute region to user's location
download_file_link.png
  1. Copy download link and solve IP by pinging in client's Command Prompt , note down the destination IP of server (this step is useful to filter IP in firewall capture, for client side capture, you can skip this step)
ping s3germanywestcentral.blob.core.windows.net
Pinging blob.fra23.prdstr03a.store.core.windows.net [x.y.m.n] with 32 bytes of data:
Request timed out
  1. Enable wireshark on GP interface (or interface tied to Remote Network deployment if this is not Mobile User deployment), you can find which interface represents PANGP virtual adapter in Wireshark>>Capture>>Options>>Manage Interfaces:
interface_wireshark.png
Run Wireshark as Administrator to be able to see/list interfaces.
wireshark_enable.png
  1. Push download button and it starts 100MB test file download through Prisma Access GP interface or interface for Remote Network(be careful not to press multiple times, only one download process should exist)
  2. At the end of download process, check Wireshark>>Statistics>>Conversations>>TCP and find 100 MB transfer then Bits/s B->A section gives download speed much more accurately.

Procedure of Azure speed test without Prisma Access:
  1. After disabling GP connection or re-routing traffic to on-prem resources if this is a remote network connection, make sure endpoint is still able to access internet. 
  2. Follow the same procedure above except step 4 , Select endpoint adapter for internet connection instead of adapter in use for Prisma Access network.

The above procedure gives  download speed rates in both scenarios(with/without Prisma Access). Compare them and continue further investigation.
 
 
 


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000g1mnCAA&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail