User Tools

Site Tools


paloaltonetworks:troubleshooting:firewall_resources

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
paloaltonetworks:troubleshooting:firewall_resources [2020/08/10 13:00] – [Buffer Usage] bstaffordpaloaltonetworks:troubleshooting:firewall_resources [2022/11/23 12:49] (current) – external edit 127.0.0.1
Line 1: Line 1:
 ====== Troubleshooting Firewall Performance ====== ====== Troubleshooting Firewall Performance ======
 +===== CPU Spikes =====
 +Could be caused by [[https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HAcfCAG|genindex.sh]].
 +
 +Could be caused by [[https://knowledgebase.paloaltonetworks.com/kcSArticleDetail?id=kA10g000000CmQv|IPsec tunnels]].
 +
 +===== Performance Issues =====
 +Possible but in PAN-OS 10.0.6 but we have seen a case where disabling "Forward segments exceeding TCP content inspection queue" cause massive throughput hit.
 ===== Show Session Limits ===== ===== Show Session Limits =====
 <code>show session info</code> <code>show session info</code>
Line 33: Line 40:
 <code>( description contains 'Packet buffer congestion is' )</code> <code>( description contains 'Packet buffer congestion is' )</code>
  
-To show the top five session using more than 2% of packet buffers:+To show the top five session using more than 2% of packet buffers: (this only works on physical firewalls)
 <code>show running resource-monitor ingress-backlocs </code> <code>show running resource-monitor ingress-backlocs </code>
 shows top five session using more than 2% of packet bufer. shows top five session using more than 2% of packet bufer.
paloaltonetworks/troubleshooting/firewall_resources.1597064459.txt.gz · Last modified: (external edit)