topic Re: Question RAD DNS Traffic in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Question-RAD-DNS-Traffic/m-p/106909#M56232 <P>Wouldn't the number of DNS requests per second with active anti-bot/DNS malware trap be more interesting than the pure bandwidth generated by the requests?</P> Mon, 04 Jan 2021 15:52:17 GMT Vincent_Bacher 2021-01-04T15:52:17Z Question RAD DNS Traffic https://community.checkpoint.com/t5/Firewall-and-Security-Management/Question-RAD-DNS-Traffic/m-p/106899#M56227 <P>hello everyone, does anyone have experience with 200 mbit / s with active threat prevention and DNS response time?</P> Mon, 04 Jan 2021 15:17:58 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Question-RAD-DNS-Traffic/m-p/106899#M56227 ak4020 2021-01-04T15:17:58Z Re: Question RAD DNS Traffic https://community.checkpoint.com/t5/Firewall-and-Security-Management/Question-RAD-DNS-Traffic/m-p/106902#M56228 <P>What's the specific question?</P> <P>Default settings typically aim to mitigate latency/timeouts per&nbsp;<SPAN>sk89340</SPAN></P> Mon, 04 Jan 2021 15:41:53 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Question-RAD-DNS-Traffic/m-p/106902#M56228 Chris_Atkinson 2021-01-04T15:41:53Z Re: Question RAD DNS Traffic https://community.checkpoint.com/t5/Firewall-and-Security-Management/Question-RAD-DNS-Traffic/m-p/106904#M56229 <P>whether gaia is basically able to handle pure dns traffic with active blades bpa 200mbit / s</P> Mon, 04 Jan 2021 15:43:06 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Question-RAD-DNS-Traffic/m-p/106904#M56229 ak4020 2021-01-04T15:43:06Z Re: Question RAD DNS Traffic https://community.checkpoint.com/t5/Firewall-and-Security-Management/Question-RAD-DNS-Traffic/m-p/106907#M56230 <P><SPAN style="font-family: inherit; background-color: #f8f8fa;">I</SPAN><SPAN style="background-color: #ffffff; font-family: inherit;"> would recommend taking the appliance / solution sizing up with your local office and SE for validation.</SPAN></P> Mon, 04 Jan 2021 15:51:37 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Question-RAD-DNS-Traffic/m-p/106907#M56230 Chris_Atkinson 2021-01-04T15:51:37Z Re: Question RAD DNS Traffic https://community.checkpoint.com/t5/Firewall-and-Security-Management/Question-RAD-DNS-Traffic/m-p/106908#M56231 <P>we just got poc hardware, 4000 appliance .. but before we start i thought i should ask if someone has experience whether cp can handle so much dns traffic in principle / has experience</P> Mon, 04 Jan 2021 15:52:07 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Question-RAD-DNS-Traffic/m-p/106908#M56231 ak4020 2021-01-04T15:52:07Z Re: Question RAD DNS Traffic https://community.checkpoint.com/t5/Firewall-and-Security-Management/Question-RAD-DNS-Traffic/m-p/106909#M56232 <P>Wouldn't the number of DNS requests per second with active anti-bot/DNS malware trap be more interesting than the pure bandwidth generated by the requests?</P> Mon, 04 Jan 2021 15:52:17 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Question-RAD-DNS-Traffic/m-p/106909#M56232 Vincent_Bacher 2021-01-04T15:52:17Z Re: Question RAD DNS Traffic https://community.checkpoint.com/t5/Firewall-and-Security-Management/Question-RAD-DNS-Traffic/m-p/106910#M56233 <P>Unfortunately I only have the traffic - but you can hear that there are very many</P> Mon, 04 Jan 2021 15:55:03 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Question-RAD-DNS-Traffic/m-p/106910#M56233 ak4020 2021-01-04T15:55:03Z Re: Question RAD DNS Traffic https://community.checkpoint.com/t5/Firewall-and-Security-Management/Question-RAD-DNS-Traffic/m-p/106912#M56234 <P>4000 series appliances are old (2 generations behind)<EM>, newer hardware is recommended.</EM></P> Mon, 04 Jan 2021 16:01:44 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Question-RAD-DNS-Traffic/m-p/106912#M56234 Chris_Atkinson 2021-01-04T16:01:44Z Re: Question RAD DNS Traffic https://community.checkpoint.com/t5/Firewall-and-Security-Management/Question-RAD-DNS-Traffic/m-p/106913#M56235 <P>sorry sg6200 - confused it with past stuff</P> Mon, 04 Jan 2021 16:03:17 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Question-RAD-DNS-Traffic/m-p/106913#M56235 ak4020 2021-01-04T16:03:17Z Re: Question RAD DNS Traffic https://community.checkpoint.com/t5/Firewall-and-Security-Management/Question-RAD-DNS-Traffic/m-p/106926#M56236 <P>Datasheet (Gen V throughout) says that should be no issue.<BR />See: <A href="https://www.checkpoint.com/datasheets/6200-security-gateway-datasheet/" target="_blank">https://www.checkpoint.com/datasheets/6200-security-gateway-datasheet/</A></P> <P>However, always a good idea to validate the precise configuration with your local Check Point SE.</P> Mon, 04 Jan 2021 19:27:36 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Question-RAD-DNS-Traffic/m-p/106926#M56236 PhoneBoy 2021-01-04T19:27:36Z Re: Question RAD DNS Traffic https://community.checkpoint.com/t5/Firewall-and-Security-Management/Question-RAD-DNS-Traffic/m-p/106927#M56237 <P>thanks a lot - the problem is nobody has experience here in our country with this special situation, but i just start the poc then we'll get smarter, thanks</P> Mon, 04 Jan 2021 19:35:21 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Question-RAD-DNS-Traffic/m-p/106927#M56237 ak4020 2021-01-04T19:35:21Z