topic Re: Sizing based on SolarWinds Data in Firewall and Security Management

Sizing based on SolarWinds Data

Fabz — Tue, 14 Nov 2023 11:15:57 GMT

Hi Check Mates,

Currently, the utilization of the FW 6400 is ~60%, and there is a need to add one more user segment to be inspected by the FW 6400.

The report from the existing switch taken from Solarwind shows that Bytes In is ~45 Mbps and Bytes Out is ~50 Mbps.

To minimize utilization in FW above 70%, is the calculation 45+50 Mbps or do we just take the highest Bytes for sizing?

Thank you!

Re: Sizing based on SolarWinds Data

Chris_Atkinson — Tue, 14 Nov 2023 11:28:42 GMT

Could you please specify the gateway software version, current peak throughput and enabled_blades for context?

Re: Sizing based on SolarWinds Data

Fabz — Tue, 14 Nov 2023 12:03:39 GMT

Last week i upgraded to the latest 81.10 with MOB, IPS, AV, TE, and AB enabled. Peak Throughput was around 670 Mbps.

Re: Sizing based on SolarWinds Data

Chris_Atkinson — Wed, 15 Nov 2023 11:33:47 GMT

Keep in mind that a 6400 is rated up to 2.5Gbps throughout for threat prevention (will vary with HTTPS inspection enabled).

Perhaps take a look at some HCP outputs to understand if there is anything about the existing configuration that you can better tune.

Depending on the number & client type used with mobile access that could be encryption algorithms or for IPS are you using a strict or optimised profile etc.

Re: Sizing based on SolarWinds Data

Chris_Atkinson — Wed, 15 Nov 2023 11:50:08 GMT

Cpsizeme (sk88160) can be run in collaboration with your local SE for further sizing insights / validation.