RE: Real World PIX 535 Performance

["Yin To Chu" <ytchu () ozemail com au>]

See these reports.

http://www.netscreen.com/resources/tests/tolly_ns5200.pdf
http://www.checkpoint.com/products/downloads/tollyreport.pdf


Throughput of a firewall is dependent on packet sizes or traffic mix,
dynamic environments with (specified numbers of sessions on and off), at
what no. of sessions, traffic types, turning on/off enhanced features, etc. 

More vendors will give impressive "marketing" performance figures which are
highest possible but are unlikely to be achievable in real environments.

Have a search on test reports of firewalls, I think there are a few at
Tolly,  in simulated environments and note how are the performances under
what setup.

If you believe the marketing throughput figures from data sheets and to
design and build a network on this, it would be highly under-engineered.

Having said that, other enhanced features (virtual systems, Vlan support,
integration with other edge services, etc, etc,), max no. of sessions
attainable or stably reachable, manageability, etc, are also important apart
from throughput.

Hope this would help.

Cheers.

Yt
---------


-----Original Message-----
From: firewall-wizards-admin () honor icsalabs com
[mailto:firewall-wizards-admin () honor icsalabs com] On Behalf Of Kevin Miller
Sent: Saturday, 4 October 2003 2:39 AM
To: firewall-wizards () honor icsalabs com
Subject: [fw-wiz] Real World PIX 535 Performance

Does the PIX 535 actually support 500,000 simultaneous sessions in a real
world situation?  
Does the PIX 535 really live up to the 1.7Gbps of firewall throughput claim?

My setup:
PIX 535 HA pair
4 66mhz GigE ports on each unit.  
4 100M ports on each unit


Thanks
Kevin
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards