topic Re: Latency Measure in General Topics

Latency Measure

Vishal_Gilatar — Mon, 25 Feb 2019 08:17:02 GMT

Hello All,

I am using 21400 appliance and would like to measure the latency of firewall per packet, i.e. client is accessing my server on certain port I would like to measure the ingress and egress port of firewall takes how much latency.

Does anyone has any script / tool or method how to measure.

Re: Latency Measure

Chris_Atkinson — Mon, 25 Feb 2019 11:44:34 GMT

Hi Vishal,

Is your 21400 populated with a SAM-108 card?

Scripting of basic external tools like "psping" or "hping" could help here but there are other far better (more scientific) monitoring & testing tools available for sure.

Re: Latency Measure

Vishal_Gilatar — Mon, 25 Feb 2019 12:02:16 GMT

Hi Chris,

Yes the appliance is populated SAM card.

My organization is into commodity markets and most of the times I need to provide the latency of firewall. Which is very tedious job I found.

Did you check with psping did it gives the complete latency of Check Point Firewall, has the latency varies due to deep inspection (IPS)

Re: Latency Measure

Chris_Atkinson — Mon, 25 Feb 2019 12:34:34 GMT

Hi Vishal,

I would definitely investigate alternatives for your specific use case, those mentioned above provide basic TCP latency metrics but sounds like you need something more permanent.