RE: [FW1] Firewall-1 on Sun 220R, any problems?

[Carric Dooley <carric@FW1-NOSPAMcom2usa.com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

one box. Those boxes run Stonebeat HA.
depeding on policy, the 220R's should handle the load pretty easily.


Carric Dooley
Senior Consultant
COM2:Interactive Media

"But this one goes to eleven."
- -- Nigel Tufnel


On Tue, 6 Feb 2001 agetchel@kde.state.ky.us wrote:

> Hi Carric,
> 	Thanks for your comments!  We will be logging to an external
> management server (two of them actually) with plenty of disk space.  We are
> seeing right around 45k sessions currently on our firewall (RS/6000 running,
> of course, AIX), with a rather large rulebase, but will be splitting the
> load up among both of the boxes we are planning to get.  When you said you
> see 20% utilization at 20k connections, did you mean for one box or a
> combined total for both of them?
> 
> Thanks,
> Abe
> 
> PS-I noticed that a few notes have come across this list from Lance
> Spitzner.  I saw him present a couple of firewall sessions last week at the
> SANS conference in New Orleans.  If you all get the chance, definitely check
> it out, he's a great presenter and the material he covers is great.  Two
> thumbs up overall for the SANS people on a great conference!
> 
> Abe L. Getchell - Security Engineer
> Division of System Support Services
> Kentucky Department of Education
> Voice> E-mail  agetchel@kde.state.ky.us
> Web     http://www.kde.state.ky.us/
> 
> 
> 
> > -----Original Message-----
> > From: Carric Dooley [mailto:carric@com2usa.com]
> > Sent: Tuesday, February 06, 2001 4:52 PM
> > To: agetchel@kde.state.ky.us; fw-1-mailinglist@lists.us.checkpoint.com
> > Subject: Re: [FW1] Firewall-1 on Sun 220R, any problems?
> > 
> > 
> > I think the problem you will run into unless you have an internal mgt
> > console with lots of disk is space. You can only put 2 drives 
> > in a 220R. If
> > it's just an engine, I have a site using a pair of 220R's 
> > with dual 450Mhz
> > CPU's - 1G of RAM (it never uses more than about 280MB), and 
> > it seems to
> > work fine (haven't seen more than about 15K-20K simultaneous 
> > connections
> > yet, but it coasts at that load... maybe 15%-20% utilization. 
> > It is a small
> > policy too though [16 rules]).
> > 
> > 
> > ----- Original Message -----
> > From: <agetchel@kde.state.ky.us>
> > To: <fw-1-mailinglist@lists.us.checkpoint.com>
> > Sent: Tuesday, February 06, 2001 4:15 PM
> > Subject: [FW1] Firewall-1 on Sun 220R, any problems?
> > 
> > 
> > >
> > > Hi all,
> > > Has anyone installed Firewall-1 on a E220R?  How well do these boxes
> > > perform under a heavy load?
> > >
> > > Thanks,
> > > Abe
> > >
> > > Abe L. Getchell - Security Engineer
> > > Division of System Support Services
> > > Kentucky Department of Education
> > > Voice> > > E-mail  agetchel@kde.state.ky.us
> > > Web     http://www.kde.state.ky.us/
> > >
> > >
> > >
> > >
> > ==============================================================
> > ==============
> > ====
> > >      To unsubscribe from this mailing list, please see the 
> > instructions at
> > >                http://www.checkpoint.com/services/mailing.html
> > >
> > ==============================================================
> > ==============
> > ====
> > >
> > 
> 

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.1
Comment: Made with pgp4pine 1.75-6

iQA/AwUBOoB5g1UqWOkDpMZ2EQJkIACgwnQIxvjvCrCJOOyJA11q6adjveEAn28b
aFT6YI9FnRp1LEtfktmKCXyO
=dT33
-----END PGP SIGNATURE-----




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================