- CheckMates
- :
- Products
- :
- General Topics
- :
- Re: SecurityPower/Throughput for Openserver which ...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
SecurityPower/Throughput for Openserver which using 4core/8core licenses
I have some deployment which using open server with 4 cores / 8 cores security gateway licenses.
I will like to know is there any security power/firewall throughput calculation based on the licenses.
Example:
4 cores licenses will have 5Gbps firewall throughput
Or for the openserver deployment, the firewall throughput are based on the open server hardware spec/nic setting?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Performance depends on a number of factors.
We do not test performance on Open Servers nor provide any specific guidance.
You can estimate based on a similar Check Point appliance but your actual performance results will vary.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Like @PhoneBoy already said. Giving out estimates for open server performance is difficult. With appliances, Check Point knows for certain what the hardware will be like and what to expect.
With open servers, the performance will vary even within the same line of open servers as different SKU's will have different configurations when it comes to CPU, RAM, RAID controller, NIC's etc. The difference in BIOS/UEFI versions, RAID controller firmware, what you decide in terms of RAID configuration, the firmware on the NIC's. So many things might affect numbers in one way or the other. CPU's also tends to be heavily thermal constrained so having different servers with the very same CPU might vary greatly in performance if one server has much better thermal capacity compared to the other.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks for the feedback. It mean for open server mostly rely on the hardware spec/nic setting and other variant to calculate the firewall throughput or performance. The licenses itself purely for the number of CPU core can be activate(?) on the open server.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The Open Server license determines the number of cores that can be active, which will impact performance.
That said, even on a given Check Point appliance where we have published performance numbers, the exact performance will vary depend on the precise hardware/software/network configuration as well as traffic flows.
Again, if you're looking for general guidance, look at the most equivalent Check Point appliance as a ballpark estimate.
For specific guidance, you may want to reach out to your local Check Point SE.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
That is correct. Doesn't matter if it's a 4-core Intel Atom CPU or a 4-core Intel Xeon. It's the same license and the performance would be very different.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
As others have said there are many variables. I would first start from the hardware compatibility list if you're installing on bear metal, then work your way from there. You can get some great value from a core based license if you spend a lot of time researching what you're going to buy - but as others have said it's a bit of an open question as we quite frankly don't know.
The clock speed and single-core performance will make a significant difference as will the NIC setup in the device, but there are many other factors.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks for all the reply.
