topic How to calculate IPS and Antibot throghput in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-calculate-IPS-and-Antibot-throghput/m-p/15151#M1057 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P>How can we calculate IPS and Antibot throughput on production firewall.</P><P></P><P>Thank you...</P></BODY></HTML> Wed, 29 Nov 2017 12:54:39 GMT Nikhil_Patil 2017-11-29T12:54:39Z How to calculate IPS and Antibot throghput https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-calculate-IPS-and-Antibot-throghput/m-p/15151#M1057 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P>How can we calculate IPS and Antibot throughput on production firewall.</P><P></P><P>Thank you...</P></BODY></HTML> Wed, 29 Nov 2017 12:54:39 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-calculate-IPS-and-Antibot-throghput/m-p/15151#M1057 Nikhil_Patil 2017-11-29T12:54:39Z Re: How to calculate IPS and Antibot throghput https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-calculate-IPS-and-Antibot-throghput/m-p/15152#M1058 <HTML><HEAD></HEAD><BODY><P>I'm assuming you have a firewall already in production, and you want to know how much IPS and Anti-bot is potentially slowing down traffic or increasing CPU load.&nbsp; There is not an easy way to directly measure this, however what you can do is execute the following steps to determine what kind of impact these blades are having as currently configured:</P><P></P><P>1) During the firewall's busiest period measure current CPU load with cpview/sar/mpstat/top/cpstat/etc.</P><P></P><P>2) Disable IPS on the fly with the <STRONG>ips off</STRONG> command on the gateway, wait 30 seconds</P><P></P><P>3) Measure current CPU load with cpview/sar/mpstat/top/cpstat/etc.</P><P></P><P>4) Disable all Threat Prevention (which includes Anti-bot) on the fly with the<STRONG> fw amw unload</STRONG> command on the gateway, wait 30 seconds</P><P></P><P>5) Measure current CPU load with cpview/sar/mpstat/top/cpstat/etc.</P><P></P><P>6) Reinstall Access and TP policy to the gateway immediately</P><P></P><P>Compare your CPU measurements throughout the process and you should be able to deduce what kind of overhead is being incurred by these blades.&nbsp; They can frequently be tuned to substantially reduce performance impact...</P><P></P><P>--<BR /> My Book "Max Power: Check Point Firewall Performance Optimization" <BR /> Second Edition Coming Soon</P></BODY></HTML> Wed, 29 Nov 2017 14:30:09 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-calculate-IPS-and-Antibot-throghput/m-p/15152#M1058 Timothy_Hall 2017-11-29T14:30:09Z