Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
LowJ
Participant

SecurityPower/Throughput for Openserver which using 4core/8core licenses

I have some deployment which using open server with 4 cores / 8 cores security gateway licenses.

I will like to know is there any security power/firewall throughput calculation based on the licenses.

Example:

4 cores licenses will have 5Gbps firewall throughput 

Or for the openserver deployment, the firewall throughput are based on the open server hardware spec/nic setting?

 

0 Kudos
7 Replies
PhoneBoy
Admin
Admin

Performance depends on a number of factors.
We do not test performance on Open Servers nor provide any specific guidance.
You can estimate based on a similar Check Point appliance but your actual performance results will vary.

0 Kudos
RamGuy239
Advisor
Advisor

Like @PhoneBoy already said. Giving out estimates for open server performance is difficult. With appliances, Check Point knows for certain what the hardware will be like and what to expect.

With open servers, the performance will vary even within the same line of open servers as different SKU's will have different configurations when it comes to CPU, RAM, RAID controller, NIC's etc. The difference in BIOS/UEFI versions, RAID controller firmware, what you decide in terms of RAID configuration, the firmware on the NIC's. So many things might affect numbers in one way or the other. CPU's also tends to be heavily thermal constrained so having different servers with the very same CPU might vary greatly in performance if one server has much better thermal capacity compared to the other.

Certifications: CCSA, CCSE, CCSM, CCSM ELITE, CCTA, CCTE, CCVS, CCME
LowJ
Participant

Thanks for the feedback. It mean for open server mostly rely on the hardware spec/nic setting and other variant to calculate the firewall throughput or performance. The licenses itself purely for the number of CPU core can be activate(?) on the open server.

 

0 Kudos
PhoneBoy
Admin
Admin

The Open Server license determines the number of cores that can be active, which will impact performance.
That said, even on a given Check Point appliance where we have published performance numbers, the exact performance will vary depend on the precise hardware/software/network configuration as well as traffic flows. 

Again, if you're looking for general guidance, look at the most equivalent Check Point appliance as a ballpark estimate.
For specific guidance, you may want to reach out to your local Check Point SE.

RamGuy239
Advisor
Advisor

That is correct. Doesn't matter if it's a 4-core Intel Atom CPU or a 4-core Intel Xeon. It's the same license and the performance would be very different.

Certifications: CCSA, CCSE, CCSM, CCSM ELITE, CCTA, CCTE, CCVS, CCME
0 Kudos
Daniel_Collins
Collaborator

As others have said there are many variables. I would first start from the hardware compatibility list if you're installing on bear metal, then work your way from there. You can get some great value from a core based license if you spend a lot of time researching what you're going to buy - but as others have said it's a bit of an open question as we quite frankly don't know. 

The clock speed and single-core performance will make a significant difference as will the NIC setup in the device, but there are many other factors. 

LowJ
Participant

Thanks for all the reply.

 

 

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Wed 01 May 2024 @ 02:00 PM (EDT)

    South US: HTTPS Inspection Best Practices

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Wed 01 May 2024 @ 02:00 PM (EDT)

    South US: HTTPS Inspection Best Practices

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82
    CheckMates Events