topic Re: 網速降速問題 in Spark Firewall (SMB)

Check Point 1900 Performance Question

Yves_Tseng — Wed, 09 Apr 2025 13:13:41 GMT

目前有Checkpoint設備有使用中跟預計上架設備

設備名稱: checkpoint 1900、1535

問題: 測試速度發現會降速

發生問題主因:

啟動以下功能，立刻降速:

There are Checkpoint devices currently in use and expected to be put on the shelves

Device name: checkpoint 1900, 1535

Problem: Test speed and find it will slow down

Main cause of the problem:

Activate the following functions to reduce speed immediately:

Re: 網速降速問題

PhoneBoy — Wed, 09 Apr 2025 13:13:02 GMT

What version of firmware?
By what method are you performing a speed test and what exact results are you getting?
The more details you can provide, the more likely we can help.

Re: Check Point 1900 Performance Question

G_W_Albrecht — Wed, 09 Apr 2025 14:06:49 GMT

Yes, this is correct and can be read in the Data Sheet performance specs i have collected here: https://community.checkpoint.com/t5/SMB-Gateways-Spark/History-of-SMB-Specs-and-Performance/td-p/174039

For 1900: FW Lab 16 Gbps / IPS Lab 9 Gbps / TP 4 Gbps

In a production deployment, numbers are lower.

Did you try a larger number of connections for your speed tests ? Try e.g. 10 clients behind the GW for speed testing (doing large file transfers).

Re: 網速降速問題

Yves_Tseng — Thu, 10 Apr 2025 07:57:28 GMT

目前的版本:

1535

1900

VDSL INFO

500M/500M

Speed TEST

Re: 網速降速問題

PhoneBoy — Thu, 10 Apr 2025 12:39:43 GMT

A speed test website tells you the performance of a single TCP connection from a single source to a single destination.
It does not tell you how the appliance will perform with multiple connections going to/from multiple destinations (how we test and generate the performance numbers shown on the datasheet).
Nor does it take into account variations that may occur with different ISP connections.

The output of Super Seven commands might be useful during a speed test: https://community.checkpoint.com/t5/SMB-Gateways-Spark/Super-Seven-Performance-Assessment-Commands-SMB-Edition/m-p/73078#M2872
However, I suspect the performance you’re seeing is expected, given your configuration and testing methodology.
I would work with your local Check Point office to find an appropriate testing methodology for your situation.

Re: 網速降速問題

Teddy_CPDC — Wed, 23 Apr 2025 03:17:01 GMT

The CHT speedtest program is using ftp download and upload large file for test speed.

In CP blade Antivirus and TP will keep connection slow and holding the last package before sandbox analyze files.

It cause the wrong speed result.

Re: 網速降速問題

Lesley — Wed, 23 Apr 2025 14:20:41 GMT

Dr. Spark report could show performance issues. This is a health check.

See: https://sc1.checkpoint.com/documents/SMB_R81.10.X/AdminGuides_Locally_Managed/EN/Content/Topics/DrSpark.htm

For testing you could try iperf. It is not optimal but better then speedtest.

Second tip, why are you checking this? Are there have been reports by users? Something wrong in monitoring?