topic Minimum required bandwidth in Spark Firewall (SMB)

Minimum required bandwidth

BenBriers — Tue, 15 Mar 2022 10:38:23 GMT

Hello,

One of our customers is having some issues with bandwidth consumption which is going to 100% on a regular basis.

He has a small line (256Kbs).

It is a remote gateway (checkpoint 1590 R80.20) connected over vpn towards a central gateway.

I have got the question what minimum required bandwidth is for the working of the firewall itself.

- managment firewall

- sending logs

- tunnel overhead

Searching the documentation did not provide me with an answer.

Br,

Ben

Re: Minimum required bandwidth

G_W_Albrecht — Tue, 15 Mar 2022 11:44:26 GMT

There is no required bandwith for firewall, but a possible maximum throughput depending on the hardware ! For 1590, this is:

660 Mbps for Threat prevention

1,300 Mbps for Next-Gen Firewall + IPS

With 1 GbE IFs for WAN and local routing, this is the highest possible traffic speed.

Used bandwidth depends on a lot of factors:

- traffic thru the GW

- enabled TP blades

- TE sending to Threatcloud

- number of VPN GW tunnels

- number of connected RA clients

- number of logged rules

Policy install usually is not much burden.

Re: Minimum required bandwidth

BenBriers — Tue, 15 Mar 2022 12:12:24 GMT

Hello,

thanks for your quick reply.

Enabled blades are firewall and IPSec VPN

traffic going over the specific firewall are only some small http/xml messages a couple times an hour.

in combination with logs which are being sent over to our central management + some monitoring traffic (snmp + ping) and opening the webgui of the firewall for example our line provider can see that their internetline is at a 100% full usage, which sometimes causes a small interruption.

So in my opinion a minimum amount of bandwith is needed on the internet line to make sure all traffic is working.

Firewall itself has indeed probably no minimum bandwith, but question is actually how big the internet line should be to get everything working.