topic Re: CloudGuard Edge Sizing in SASE and Remote Access

CloudGuard Edge Sizing

MikeB — Mon, 10 Aug 2020 15:32:56 GMT

I am a little confused about the licensing and sizing that should be considered for CloudGuard Edge.

According to the CloudGuard Edge datasheet it indicates that the minimum features are CPU:1 RAM:1 Disk:1 but in the Release Notes for KVM/ESX it indicates CPU:2 RAM:2 Disk:3 (not configurable).

So would it be necessary to consider two CloudGuard Edge licenses (CP-CGE-NGTP-1X) as a minimum to deploy it on KVM/ESX?

Also, for sizing issues, how much throughput could be considered with 1vCPU or 2vCPU? Or any other suggestion for proper sizing?

Re: CloudGuard Edge Sizing

PhoneBoy — Wed, 12 Aug 2020 16:38:02 GMT

Believe you'll want two cores (and two licenses), yes.
I suspect the actual throughput will depend on the strength of the underlying CPU, but I would guess we're talking a few hundred megabytes of NGTP throughput.

Re: CloudGuard Edge Sizing

MikeB — Wed, 07 Oct 2020 01:01:10 GMT

Hi PhoneBoy, Is there any Performance Test available that we can consider for this?? How can we do a proper (or at least estimate) sizing considering 1vCPU.

Would it be helpful to know what type of CPU has the 15xx appliances?? (I can't find any info)

Re: CloudGuard Edge Sizing

PhoneBoy — Wed, 07 Oct 2020 04:25:22 GMT

SMB appliances use ARM CPUs, whereas CloudGuard Edge runs on Intel ones.
They’re not exactly comparable.

Also, pretty sure the R80.x versions of CloudGuard Edge require two cores.
The original datasheet was created with the R77.20 code, which could run on a single core.

Re: CloudGuard Edge Sizing

MikeB — Wed, 07 Oct 2020 13:29:57 GMT

Thank you very much for the information PhoneBoy. It is dissapointing that there is no further information on how to correctly sizing with Cloudguard Edge for EXSi/KVM. I hope soon Check Point can publish some reference performance data.

Re: CloudGuard Edge Sizing

_Val_ — Wed, 07 Oct 2020 13:43:05 GMT

Did you raised this with your local partner/ CP local office?

Re: CloudGuard Edge Sizing

PhoneBoy — Mon, 12 Oct 2020 03:51:43 GMT

There are performance figures published for specific SD-WAN appliances, but not "general" ones.
I know some additional performance testing is being done right now.
As Val suggested, recommend engaging through your local office.

Re: CloudGuard Edge Sizing

MikeB — Mon, 12 Oct 2020 23:15:44 GMT

Thank you @PhoneBoy and @_Val_. I am actually a CP Partner trying to find this info for our customers. I will try to move forward with our local Check Point contact.

Re: CloudGuard Edge Sizing

rakesh_ar — Mon, 11 Jan 2021 13:47:19 GMT

Hi @MikeB

Wondering if you got any sizing information for CloudGuard Edge on KVM/ESXi

Thankyou.

Re: CloudGuard Edge Sizing

MikeB — Mon, 11 Jan 2021 14:10:10 GMT

Yes, I received a message from @Jeff_Engel from Check Point who helped me with sizing.

2 vCPU with a somewhat modern CPU and 2 GB of RAM should give you at least 300 Mbps of NGTX. But sure Check Point are willing to help you POC it and prove it out before any commitments are made.

Also, 1 vCPU and 1 GB RAM is possible but performance will be reduced a fair amount.

Re: CloudGuard Edge Sizing

Jeff_Engel — Tue, 12 Jan 2021 04:25:30 GMT

Thanks @MikeB for the mention.

@rakesh_ar , please let me know how I can help.