Benoit Verove

Test de l'accès au cloud Sandblast

Blog Post created by Benoit Verove on Aug 7, 2018

Si vous activez la blade ThreatEmulation sur vos gateways en choisissant une émulation dans le Cloud Check Point, il est important de vérifier la bonne communication entre vos gateways et les infrastructures d'émulation.

 

Pour faire émuler les fichiers la gateway contacte "te.checkpoint.com". Il s'agit d'un alias qui renvoie vers les adresses des trois localisations d'émulation (Israel, US, Allemagne)

Exemple de résolution depuis Paris :

> te.checkpoint.com
Serveur :   UnKnown
Address:  192.168.3.7

Réponse ne faisant pas autorité :
Nom :    te.g03.checkpoint.com
Address:  217.68.8.76
Aliases:  te.checkpoint.com

 

 

Gaia embarque la commande "ab" qui permet de générer des connexions et restitue de précieuses statistiques. Appliqué à notre adresse te.checkpoint.com, voici ce que cela donne :

 

 

[Expert@GW1:0]# ab -k -n 1000 -c 1 https://te.checkpoint.com/tecloud/Ping
This is ApacheBench, Version 2.3 <$Revision$>
Copyright 1996 Adam Twiss, Zeus Technology Ltd, http://www.zeustech.net/
Licensed to The Apache Software Foundation, http://www.apache.org/

Benchmarking te.checkpoint.com (be patient)
Completed 100 requests
Completed 200 requests
Completed 300 requests
Completed 400 requests
Completed 500 requests
Completed 600 requests
Completed 700 requests
Completed 800 requests
Completed 900 requests
Completed 1000 requests
Finished 1000 requests


Server Software:        CPWS
Server Hostname:        te.checkpoint.com
Server Port:            443
SSL/TLS Protocol:       TLSv1.2,AES256-SHA256,2048,256
TLS Server Name:        te.checkpoint.com

Document Path:          /tecloud/Ping
Document Length:        4 bytes

Concurrency Level:      1
Time taken for tests:   122.339 seconds
Complete requests:      1000
Failed requests:        0
Keep-Alive requests:    991
Total transferred:      311543 bytes
HTML transferred:       4000 bytes
Requests per second:    8.17 [#/sec] (mean)
Time per request:       122.339 [ms] (mean)
Time per request:       122.339 [ms] (mean, across all concurrent requests)
Transfer rate:          2.49 [Kbytes/sec] received

Connection Times (ms)
              min  mean[+/-sd] median   max
Connect:        0    2  18.3      0     217
Processing:    75  121  25.3    119     503
Waiting:       56   89  21.5     87     468
Total:         75  122  31.5    119     503

Percentage of the requests served within a certain time (ms)
  50%    119
  66%    127
  75%    132
  80%    136
  90%    147
  95%    158
  98%    184
  99%    266
 100%    503 (longest request)

 

Bon tests !

Outcomes