Inspect Chain Modules

[valterj]

Hi, all

Since inspection is performed both ingress and egress interfaces, wouldn't that introduce latency in the environment while traffic is being inspected by various modules by their respective handlers? If so, what tool can I use to identify amount of latency before enabling additional blades on the device?

In fw ctl chain output, why some modules are loaded in chain, out chain, and both?

Regards. 

[_Val_]

Inspection is mostly done on ingress. 

[valterj]

Hi.

Could you explain this? Does inspection happen from the moment the packet incoming the SGW until the moment it leaves, or not?

Regards

[G_W_Albrecht]

sk43733: How to measure CPU time consumed by PM

sk103657: Best Practices - IPS

sk95193: ATRG: IPS