High Network Usage

JCMorris 6
Viewed 0

Hello,

We have a number of remote sites that we are currently actively monitoring with PA, connected to our headquarters via an MPLS network. I have noticed via netflow that there is a large amount of network traffic between the remote Windows servers and PA monitor. We are utilizing the standard monitors. I assume some monitors require more bandwidth than others such as the watch folders. Does anyone have any recommendations on how to minimize the traffic without disabling the monitors all together?

Thanks,

Josh

usage network
1 Answers

The largest monitors as far as bandwidth is concerned are:

  1. Event Log Monitor
  2. Service Monitor
  3. File & Directory Change monitor
  4. Performance Monitor (depending on how many counters are watched)

You could have #2, #3 and #4 run less often and that would reduce network usage. For #1, the events will have to be read sooner or later. Make sure you're not watching Event Logs that you don't care about.

The thing that would help most is to have a Satellite monitoring service running at the remote site. Then all of the chatty Windows protocols are kept on the remote network, and you only have the Satellite traffic, which is compressed considerably, and much less chatty. That usually makes a big difference.

Doug1126
Related