Question RAD DNS Traffic

[ak4020]

hello everyone, does anyone have experience with 200 mbit / s with active threat prevention and DNS response time?

[Chris_Atkinson]

What's the specific question?

Default settings typically aim to mitigate latency/timeouts per sk89340

[ak4020 · Accepted solution]

whether gaia is basically able to handle pure dns traffic with active blades bpa 200mbit / s

[Vincent_Bacher]

Wouldn't the number of DNS requests per second with active anti-bot/DNS malware trap be more interesting than the pure bandwidth generated by the requests?

[Chris_Atkinson]

I would recommend taking the appliance / solution sizing up with your local office and SE for validation.

[ak4020]

we just got poc hardware, 4000 appliance .. but before we start i thought i should ask if someone has experience whether cp can handle so much dns traffic in principle / has experience

[Chris_Atkinson]

4000 series appliances are old (2 generations behind), newer hardware is recommended.

[ak4020]

Unfortunately I only have the traffic - but you can hear that there are very many

[ak4020]

sorry sg6200 - confused it with past stuff

[PhoneBoy · Accepted solution]

Datasheet (Gen V throughout) says that should be no issue.
See: https://www.checkpoint.com/datasheets/6200-security-gateway-datasheet/

However, always a good idea to validate the precise configuration with your local Check Point SE.

[ak4020]

thanks a lot - the problem is nobody has experience here in our country with this special situation, but i just start the poc then we'll get smarter, thanks