topic Very Slow CheckPoint 1570 - Getting only 200mbps on a 1Gig Fiber Line in Spark Firewall (SMB)

Very Slow CheckPoint 1570 - Getting only 200mbps on a 1Gig Fiber Line

MEGA-CITY-FATs — Tue, 17 Oct 2023 15:21:21 GMT

Greetings

Mr. BIG MEGA CITY FATs Here

Very Slow CheckPoint 1570 - Getting only 200mbps on a 1Gig Fiber Line

I have only enabled 50% of the Modules and I am getting 200mbps on a 1Gig Fiber Line

Everything becomes Slow after I switch on the SSL INSPECTION Service

As long as I switch on SSL INSPECTION - I get the 200mbps Speed

If I switch SSL INSPECTION OFF - I get around 550+mbps

Can someone please help Mr. BIG MEGA CITY FATs Here

Thank You

Re: Very Slow CheckPoint 1570 - Getting only 200mbps on a 1Gig Fiber Line

Chris_Atkinson — Wed, 18 Oct 2023 07:39:27 GMT

Degradation is expected, but to get a better gauge please supply some additional details about your 1570 deployment:

-Which firmware version/build does the appliance run?

-Are you using the SmartAccel feature at all currently?

-How are the speed tests being performed?

-Does your reduced throughput correlate with high CPU utilization?

- What MTU is supported by the ISP connection and is MSS clamping enabled on the Gateway?

- Which blades are enabled?

Re: Very Slow CheckPoint 1570 - Getting only 200mbps on a 1Gig Fiber Line

Tom_Hinoue — Wed, 18 Oct 2023 07:04:42 GMT

I believe the 200Mbps speed is pretty much expected throughput on these SMB appliances if you are using Full SSL Inspection. Depending on how you optimize the appliance, with Full SSL inspection I say the throughput will be 1/2 or 1/3 the Threat Prevention throughput whereas a CP1570 with Threat Prevention the datasheet throughput give you 500Mbps, which is pretty much what you are currently achieving w/o SSL Inspection = 550+Mbps

Also, as Chris mentioned, you might want to check which firmware you are currently running.
Latest R81.10.XX firmware has many improvements relates to SSL Inspection so you might want to upgrade to the latest R81.10.08 (996001612) if you are still running old versions like R80.20.XX to eliminate any issues related to software.

Re: Very Slow CheckPoint 1570 - Getting only 200mbps on a 1Gig Fiber Line

G_W_Albrecht — Wed, 18 Oct 2023 07:29:46 GMT

This is the expected speed with https inspection on - remember that everything has its price ! Packets get decrypted, inspected and encrypted again - this is no easy job.