topic Re: maximum latency time in communication between management and firewalls in General Topics

maximum latency time in communication between management and firewalls

Agust — Tue, 19 Dec 2023 16:14:28 GMT

We are planning to migrate the management server to a different datacenter where it is currently installed together with the firewalls.
So the management and firewalls will be located in different datacenters that are geographically distant.
Therefore we would like to know if there is any limitation in terms of latency and packet loss rate, as there is for synchronization between nodes: 100ms latency and no more than 5% packet loss.

Thank you.

Re: maximum latency time in communication between management and firewalls

the_rock — Tue, 19 Dec 2023 16:23:20 GMT

I had case with TAC on this while back as customer asked me exact same question, but they told us it really depends on the ISP reliability and speed at the site where mgmt server is located, so there was no real set threshold, if you will. Not sure if that has changed recently, but you may want to get an official confirmation.

Lets see if anyone else has an idea.

Best,

Andy

Re: maximum latency time in communication between management and firewalls

Bob_Zimmerman — Tue, 19 Dec 2023 16:35:25 GMT

Management to firewall can be up to about a second of latency. That can cause problems managing firewalls over a satellite link, but that's about it. My memory is higher latencies can be tolerated, but they take some special config.