topic SecurityPower/Throughput for Openserver which using 4core/8core licenses in General Topics

SecurityPower/Throughput for Openserver which using 4core/8core licenses

LowJ — Wed, 14 Jul 2021 01:51:42 GMT

I have some deployment which using open server with 4 cores / 8 cores security gateway licenses.

I will like to know is there any security power/firewall throughput calculation based on the licenses.

Example:

4 cores licenses will have 5Gbps firewall throughput

Or for the openserver deployment, the firewall throughput are based on the open server hardware spec/nic setting?

Re: SecurityPower/Throughput for Openserver which using 4core/8core licenses

PhoneBoy — Wed, 14 Jul 2021 04:44:13 GMT

Performance depends on a number of factors.
We do not test performance on Open Servers nor provide any specific guidance.
You can estimate based on a similar Check Point appliance but your actual performance results will vary.

Re: SecurityPower/Throughput for Openserver which using 4core/8core licenses

RamGuy239 — Thu, 15 Jul 2021 18:18:09 GMT

Like @PhoneBoy already said. Giving out estimates for open server performance is difficult. With appliances, Check Point knows for certain what the hardware will be like and what to expect.

With open servers, the performance will vary even within the same line of open servers as different SKU's will have different configurations when it comes to CPU, RAM, RAID controller, NIC's etc. The difference in BIOS/UEFI versions, RAID controller firmware, what you decide in terms of RAID configuration, the firmware on the NIC's. So many things might affect numbers in one way or the other. CPU's also tends to be heavily thermal constrained so having different servers with the very same CPU might vary greatly in performance if one server has much better thermal capacity compared to the other.

Re: SecurityPower/Throughput for Openserver which using 4core/8core licenses

LowJ — Fri, 16 Jul 2021 02:15:12 GMT

Thanks for the feedback. It mean for open server mostly rely on the hardware spec/nic setting and other variant to calculate the firewall throughput or performance. The licenses itself purely for the number of CPU core can be activate(?) on the open server.

Re: SecurityPower/Throughput for Openserver which using 4core/8core licenses

PhoneBoy — Fri, 16 Jul 2021 02:41:09 GMT

The Open Server license determines the number of cores that can be active, which will impact performance.
That said, even on a given Check Point appliance where we have published performance numbers, the exact performance will vary depend on the precise hardware/software/network configuration as well as traffic flows.

Again, if you're looking for general guidance, look at the most equivalent Check Point appliance as a ballpark estimate.
For specific guidance, you may want to reach out to your local Check Point SE.

Re: SecurityPower/Throughput for Openserver which using 4core/8core licenses

RamGuy239 — Fri, 16 Jul 2021 06:28:57 GMT

That is correct. Doesn't matter if it's a 4-core Intel Atom CPU or a 4-core Intel Xeon. It's the same license and the performance would be very different.

Re: SecurityPower/Throughput for Openserver which using 4core/8core licenses

Daniel_Collins — Mon, 19 Jul 2021 10:14:27 GMT

As others have said there are many variables. I would first start from the hardware compatibility list if you're installing on bear metal, then work your way from there. You can get some great value from a core based license if you spend a lot of time researching what you're going to buy - but as others have said it's a bit of an open question as we quite frankly don't know.

The clock speed and single-core performance will make a significant difference as will the NIC setup in the device, but there are many other factors.

Re: SecurityPower/Throughput for Openserver which using 4core/8core licenses

LowJ — Mon, 19 Jul 2021 12:44:39 GMT

Thanks for all the reply.