01-09-2017 06:01 AM
@panhanhen I think your confusing the max session capacity and the connections per second capacity. The maximum session is exactly that, that number is the highest number of sessions that your firewall can handle at any given time. The connections per second rate is how many new sessions can form in any given second; since the firewall has to process a lot more informaiton at the start of a new session the cps rate is much lower than what your max session limit is. At the start of a new session the firewall has to determine what security policy that session falls under, what application it's using, if it's allowed, and if it matches anything else that your firewall is setup to monitor. Whereas an existing session can take the same session path and the firewall just 'checks' in on it and verifies that the application hasn't changed and runs it against any antivirus, spyware, and other such profiles.
