topic Hardware processing in General Topics

Hardware processing

MarcoMaysundo — Wed, 05 Jul 2017 18:15:44 GMT

Hi,

Modifying the security profiles that come by default to drop. Hardware processing will rise at any given time?

Thank you

Re: Hardware processing

reaper — Thu, 06 Jul 2017 12:25:23 GMT

Hi Marco!

Could you elaborate on what you'd like to know exactly ?

The default security profiles cannot be changed so you may be talking about something else.

In most situations changing the action on something (profiles, policies, ..) to drop, as opposed to allow, will lower hardware processing as you're now discarding something instead of applying inspection on the packets.

Re: Hardware processing

MarcoMaysundo — Thu, 06 Jul 2017 14:23:43 GMT

Hello!
Yes, what I wanted to express was the change in the exceptions. If the security profiles on threats, default and stric, I clone and change signatures that come by default from alert to drop. Would hardware processing increase?

We can see that the signatures have by default to alert the traffic that matches these. If I change the action to drop in these and several more signatures, 98 more. Processing increases gradually?

Re: Hardware processing

BPry — Thu, 06 Jul 2017 15:15:07 GMT

That makes drastically more sense. Your processing wouldn't increase but by the time it gets to threat processing you won't see that big of a decrease either. Anytime you actually drop something you'll actually save a little in processing as it doesn't continue the inspection process, a drop action will never increase processing load.