Sizing based on SolarWinds Data

[Fabz]

Hi Check Mates,

Currently, the utilization of the FW 6400 is ~60%, and there is a need to add one more user segment to be inspected by the FW 6400.

The report from the existing switch taken from Solarwind shows that Bytes In is ~45 Mbps and Bytes Out is ~50 Mbps.

To minimize utilization in FW above 70%, is the calculation 45+50 Mbps or do we just take the highest Bytes for sizing?

Thank you!

[Chris_Atkinson]

Could you please specify the gateway software version, current peak throughput and enabled_blades for context?

[Fabz]

Last week i upgraded to the latest 81.10 with MOB, IPS, AV, TE, and AB enabled. Peak Throughput was around 670 Mbps.

[Chris_Atkinson]

Keep in mind that a 6400 is rated up to 2.5Gbps throughout for threat prevention (will vary with HTTPS inspection enabled). 

Perhaps take a look at some HCP outputs to understand if there is anything about the existing configuration that you can better tune.

Depending on the number & client type used with mobile access that could be encryption algorithms or for IPS are you using a strict or optimised profile etc.

[Chris_Atkinson · Accepted solution]

Cpsizeme (sk88160) can be run in collaboration with your local SE for further sizing insights / validation.