- CheckMates
- :
- Products
- :
- Quantum
- :
- Threat Prevention
- :
- Re: RAM required for Application control and URL f...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
RAM required for Application control and URL filtering Blade
Dear all,
In my setup, I am using firewalls and IPS blades. And now I am going to enable Application control and URL filtering blade in my existing setup. But in my gateway physical memory install 8 GB only and free memory is around 1.65 GB.
So my concern is how much more RAM is required for enabling both blades (Application control and URL filtering). So we can upgrade the RAM size as per requirement.
My existing RAM size is 8 GB (free 1.65 GB) and two blades are enabled (IPS and Firewall)
Gateway family is 15400
OS GAIA R80.20
Regards,
RB
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The amount of additional RAM required for these two blades should be pretty minimal if you already have IPS enabled, which does a fair amount of operation in the same processing path (PSLXL) as APCL/URLF. Post the outputs of free -m and fw ctl pstat for a quick check to see if your firewall is low on memory.
now available at maxpowerfirewalls.com
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
If you've already turned on IPS, then you've already running the same engines App Control and URL Filtering use.
App Control does have some additional signatures that will be in memory and URL Filtering uses cloud lookups.
Unless you have an excessive number of concurrent connections (somewhere over a million), you should be fine.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks for your reply,
My main concern is blocking public VPN traffic (exm--turbo VPN) on my firewall end. And for this, I have logged a call with OEM and they suggest me to enable both blades.
Kindly suggest
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
And, like I said, you've already got the engines running because you're using IPS, so the additional memory utilization will be minimal.