Hello, We have a number of remote sites that we are currently actively monitoring with PA, connected to our headquarters via an MPLS network. I have noticed via netflow that there is a large amount of network traffic between the remote Windows servers and PA monitor. We are utilizing the standard monitors. I assume some monitors require more bandwidth than others such as the watch folders. Does anyone have any recommendations on how to minimize the traffic without disabling the monitors all together? Thanks, Josh asked 21 Mar '17, 11:06 JCMorris |
The largest monitors as far as bandwidth is concerned are:
You could have #2, #3 and #4 run less often and that would reduce network usage. For #1, the events will have to be read sooner or later. Make sure you're not watching Event Logs that you don't care about. The thing that would help most is to have a Satellite monitoring service running at the remote site. Then all of the chatty Windows protocols are kept on the remote network, and you only have the Satellite traffic, which is compressed considerably, and much less chatty. That usually makes a big difference. answered 18 Apr '17, 12:21 Doug ♦♦ |