Device Capacity Planning

dpayne — Tue, 06 Oct 2015 18:07:19 GMT

I am trying to get my head around device throughput maximums. As an example the 3020 is speced as such:

2 Gbps firewall throughput
(App-ID enabled1)
1 Gbps threat prevention throughput
500 Mbps IPSec VPN throughput

Are these throughputs simultaneous? In other words, can I have 2Gbps of Firewall through put and 500Mpbs of IPsec traffic, or if I have 500Mbps of IPsec traffic, am essentially depleted at that point?

The onset of more affordable high bandwidth is starting to cause concerns for some of our exisitng deployment; as well there is more need to have strict DMZ deployments where internal to server zone policies could see pretty heavy bandwidth demands.

Any thoughts or experience would be appreicated.

Re: Device Capacity Planning

cpainchaud — Tue, 06 Oct 2015 18:22:17 GMT

all this features are using partly classic software calculation and partly specialized CPUs/ASICs/FPGAs .

So you should get numbers in between of the specs : 500MB encrypted vpn traffic + more for 'normal' traffic.

worst case scenario is you get 500MB but by experience I've never that low numbers.

topic Re: Device Capacity Planning in General Topics

Device Capacity Planning

Re: Device Capacity Planning