Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
ak4020
Contributor

Question RAD DNS Traffic

Jump to solution

hello everyone, does anyone have experience with 200 mbit / s with active threat prevention and DNS response time?

0 Kudos
Reply
1 Solution

Accepted Solutions
PhoneBoy
Admin
Admin

Datasheet (Gen V throughout) says that should be no issue.
See: https://www.checkpoint.com/datasheets/6200-security-gateway-datasheet/

However, always a good idea to validate the precise configuration with your local Check Point SE.

View solution in original post

0 Kudos
Reply
10 Replies
Chris_Atkinson
Employee
Employee

What's the specific question?

Default settings typically aim to mitigate latency/timeouts per sk89340

0 Kudos
Reply
ak4020
Contributor

whether gaia is basically able to handle pure dns traffic with active blades bpa 200mbit / s

0 Kudos
Reply
Vincent_Bacher
Advisor

Wouldn't the number of DNS requests per second with active anti-bot/DNS malware trap be more interesting than the pure bandwidth generated by the requests?

and now to something completely different
0 Kudos
Reply
Chris_Atkinson
Employee
Employee

I would recommend taking the appliance / solution sizing up with your local office and SE for validation.

0 Kudos
Reply
ak4020
Contributor

we just got poc hardware, 4000 appliance .. but before we start i thought i should ask if someone has experience whether cp can handle so much dns traffic in principle / has experience

0 Kudos
Reply
Chris_Atkinson
Employee
Employee

4000 series appliances are old (2 generations behind), newer hardware is recommended.

0 Kudos
Reply
ak4020
Contributor

Unfortunately I only have the traffic - but you can hear that there are very many

0 Kudos
Reply
ak4020
Contributor

sorry sg6200 - confused it with past stuff

0 Kudos
Reply
PhoneBoy
Admin
Admin

Datasheet (Gen V throughout) says that should be no issue.
See: https://www.checkpoint.com/datasheets/6200-security-gateway-datasheet/

However, always a good idea to validate the precise configuration with your local Check Point SE.

View solution in original post

0 Kudos
Reply
ak4020
Contributor

thanks a lot - the problem is nobody has experience here in our country with this special situation, but i just start the poc then we'll get smarter, thanks

0 Kudos
Reply