topic Re: Need an advice in General Topics

Need an advice

jesus_torres — Mon, 06 May 2013 15:58:33 GMT

Hello team..

I need the best or a good advice to do the correct sizing for a PAN device, yo know I don't know if there is some sizing tool that can help me, or some document to read it and understand what is the best way to do the right sizning...

thank you..

Re: Need an advice

NGS_SOC — Mon, 06 May 2013 18:50:00 GMT

Ask for a POC demo to a PAN local Partner and try to install the device they provide for a week capturing the majority of traversing traffic. Internal PAN command are able to calculate the throughput. Once you have this value follow the specsheets. For a medium size network 3000 serie is the best choice, 5000 if you have big network.

Interface numbers and license are simple to evaluate.

Regards

Re: Need an advice

mikand — Tue, 07 May 2013 08:04:17 GMT

Another thing to take into account is if you will be performing ssl-termination (highly likely if this box will face Internet) since the concurrent ssl decryptions varies between the models.

For PA-5000 series its (if I recall it correctly):

PA-5020: 15000

PA-5050: 45000

PA-5060: 90000

A way to "bypass" this, if you have two boxes, is to configure the two boxes independently and then use some loadbalancing before/after the PA-pair. So half of the clients goes through one box and the other half through the other.