The Appliance Comparison chart (https://www.checkpoint.com/downloads/products/check-point-appliance-comparison-chart.pdf) mentions "Throughput" under Enterprise and Ideal conditions. What does "Throughput" mean here ?
1) Does it mean that that this is the maximum amount of traffic the device can handle without CPU hitting 100% or without device dropping any traffic ?
2) How do I use this "Throughput" number to find an appropriate sized Checkpoint firewall ? For example if I have a hypothetical firewall with 4 interfaces with following 5 minutes statistics:
INT1 = Transmitted 500M bps, Received 1500M bps
INT2 = Transmitted 2000M bps, Received 500M bps
INT3 = Transmitted 1000M bps, Received 600M bps
INT4 = Transmitted 500M bps, Received 1400M bps
In the above the sum of Transmitted from all interfaces is 4000Mbps and sum of Received on all interfaces is also 4000Mbps. What is the "Throughput" here ? Which one of the below is true ?
a) Higher value of EITHER sum of Transmitted from all interfaces OR sum of Received from all interfaces ? In actual device these numbers could be slightly different ? i.e. 4000 Mbps.
b) Grand total of sum of Transmitted from all interfaces AND sum of Received from all interfaces ? i.e. 8000 Mbps. If this is the case then aren't we double counting ?
I will be taking the Threat Prevention (Gbps) from the comparison chart to size a firewall since this number is the lowest compared to other numbers. I assume that this Gbps has no relation with CPU utilization.
Is there any document or link on Checkpoint website that covers "Throughput" and Sizing in the above context ?
Thanks
KM