topic What exactly is Firewall throughput , how do we decide for a network? in General Topics

What exactly is Firewall throughput , how do we decide for a network?

Shashihm — Sat, 09 May 2020 08:39:11 GMT

I need to deploy a firewall for medium sized enterprise so need help here to understand the Firewall throughput and how to evaluate the Firewall throughput for a network.

Re: What exactly is Firewall throughput , how do we decide for a network?

reaper — Sat, 09 May 2020 20:33:57 GMT

Do you know the throughput of the current infrastructure? Could you provide some details about the network you are trying to scale for?

Once you know what your network is supposed to displace, picking a firewall is easy https://www.paloaltonetworks.com/products/product-selection

Re: What exactly is Firewall throughput , how do we decide for a network?

Shashihm — Mon, 11 May 2020 14:27:29 GMT

Do you know the throughput of the current infrastructure?

No , this will be new setup.

Could you provide some details about the network you are trying to scale for?

Network would be for 100 Desktops firewall will be gateway for these desktops,it segregates desktops from corporate and internet.

Windows updates , Domain Services antivirus updates will happen from corporate network

Citrix ,Outlook genric browsing will happen from internet. Rest will be blocked at firewall.

Firewall should performs next gen functions along with threat prevention. So Please suggest how do we evaluate firewall through put for this kind of network setup.

Thanks for your reply

Re: What exactly is Firewall throughput , how do we decide for a network?

reaper — Mon, 11 May 2020 16:14:25 GMT

Sounds like a pa-820 would do the trick 😉

Re: What exactly is Firewall throughput , how do we decide for a network?

KunalChopra — Mon, 11 May 2020 16:36:53 GMT

You need to have clarity over the basic minimum network infrastructure in order to size PA firewall.

For ex :- How much is the current bandwidth of customer ? what many approx users are ? is there any other type of internal traffic which would use firewall other than normal internet ? Also it should not be VDI infra in in which 1 user is counted as many user .?

whatever you mentioned in thread , I guess it will be PA 220 vs PA 820..