Reduction in throughput (MB) when traffic passes through the firewall

[JenniferYado]

Hi,

I have the following network where a certain amount of 150MB was contracted on the L2L link.
Servers> Switch > FW > L2L link > FW > Switch > Servers

We performed throughput tests and noticed that the total MB is reduced to 60MB when the traffic passes through the FWs:Server > Switch > FW > L2L link > FW > Switch > Servers

We performed another test removing the FWs and noticed that the total 150MB is what we should have:
Server > Switch > L2L link > Switch > Servers

Therefore we conclude that the problem is in the FW since when the traffic passes through there we see a decrease in MB.
We have checked that the interfaces do not have problems at layer 1 level.

Any idea what's going on?

[the_rock]

I would start with cpview and see if there is anything unusual there. If not, run ethtool -S and also see from ifconfig output what errors show. You can also see this from interface config in web UI, just click on advanced or monitoring in upper right (cant recall the exact wording now).

Andy

[Chris_Atkinson]

How is the test being performed - are multiple concurrent connections used?

Which appliance do you have and which version/JHF?

What security blades are enabled, do you observe high CPU?

[AkosBakos]

Hi @JenniferYado 

And the third tip is the MTU. Tipically the MTU is 1500 on the interfaces. Do you have the same setting?

A