Check Point 1900 Performance Question

[Yves_Tseng]

Click to Expand

目前有Checkpoint設備有使用中跟預計上架設備

設備名稱: checkpoint 1900、1535

問題: 測試速度發現會降速

發生問題主因:

啟動以下功能，立刻降速:

There are Checkpoint devices currently in use and expected to be put on the shelves

Device name: checkpoint 1900, 1535

Problem: Test speed and find it will slow down

Main cause of the problem:

Activate the following functions to reduce speed immediately:

[PhoneBoy]

What version of firmware?
By what method are you performing a speed test and what exact results are you getting?
The more details you can provide, the more likely we can help.

[Yves_Tseng]

目前的版本:

1535 

1900

VDSL INFO

500M/500M

Speed TEST

[PhoneBoy]

A speed test website tells you the performance of a single TCP connection from a single source to a single destination.
It does not tell you how the appliance will perform with multiple connections going to/from multiple destinations (how we test and generate the performance numbers shown on the datasheet).
Nor does it take into account variations that may occur with different ISP connections.

The output of Super Seven commands might be useful during a speed test: https://community.checkpoint.com/t5/SMB-Gateways-Spark/Super-Seven-Performance-Assessment-Commands-S...
However, I suspect the performance you’re seeing is expected, given your configuration and testing methodology.
I would work with your local Check Point office to find an appropriate testing methodology for your situation.

[Teddy_CPDC]

The CHT speedtest program is using ftp download and upload large file for test speed.

In CP blade Antivirus and TP will keep connection slow and holding the last package before sandbox analyze files.

It cause the wrong speed result.

[Lesley]

Dr. Spark report could show performance issues. This is a health check.

See: https://sc1.checkpoint.com/documents/SMB_R81.10.X/AdminGuides_Locally_Managed/EN/Content/Topics/DrSp...

For testing you could try iperf. It is not optimal but better then speedtest. 

Second tip, why are you checking this? Are there have been reports by users? Something wrong in monitoring?

[G_W_Albrecht]

Yes, this is correct and can be read in the Data Sheet performance specs i have collected here: https://community.checkpoint.com/t5/SMB-Gateways-Spark/History-of-SMB-Specs-and-Performance/td-p/174...

For 1900: FW Lab 16 Gbps / IPS Lab 9 Gbps / TP 4 Gbps

In a production deployment, numbers are lower.

Did you try a larger number of connections for your speed tests ? Try e.g. 10 clients behind the GW for speed testing (doing large file transfers).