RE: [FW1] number of concurrent connections

["Juppunov, George" <gjuppunov@FW1-NOSPAMbofasecurities.com>]

The basic entry in the connection table requires about 7K of memory.
The NAT requires I believe twice as much. CVPs require twice as many 
connections etc. etc. Depending on your hits you can calculate how 
much memory you need. Also take into consideration that sessions stay
in the connection table for some time. I'm not sure if there is a hard coded
limit.

Hope that helps.

George

> -----Original Message-----
> From:	David C. Diemer [SMTP:ddiemer@doas.state.ga.us]
> Sent:	Friday, April 27, 2001 10:57 AM
> To:	cmora@adexus.cl
> Cc:	fw-1-mailinglist@beethoven.us.checkpoint.com
> Subject:	Re: [FW1] number of concurrent connections
> 
> Claudio:
>  
> That depends on the version of CKP you're running.   In both, no matter,
> it
> depends on how much memory you need based on the State table size,
> VPN connections, OPSEC (LEA), CVP, and in 4.1 CPMAD.
>  
> If you have the base 128MB of RAM with simply a State table, then you 
> can easily handle 128,000 connections.   That means that nothing else is
> included.   Each additional feature requires additonal RAM.   As most of
> us
> have found out, 256MB should be the norm and, if possible, 512MB RAM.
>  
>  
> David C. Diemer, CCSE
> Enterprise Security Firewall Engineer
> Georgia Department of Administrative Services (DOAS)
> 200 Piedmont Ave. SE
> Suite 1420, West Tower
> Atlanta, GA   30334
> ddiemer@doas.state.ga.us <mailto:ddiemer@doas.state.ga.us>
> (V)> (F)> 
> >>> "Claudio Mora" <cmora@adexus.cl> 04/16/01 09:42AM >>>
> 
> 
> 
> What is the maximum number of concurrent connections allowing in the
> Firewall-1?
> (25.000 or 50.000 or more)
> 
> 
> Thanks in advance,
> -Claudio
> 
> 
> 
> 
> ==========================================================================
> ======
>       To unsubscribe from this mailing list, please see the instructions
> at
>                 <http://www.checkpoint.com/services/mailing.html>
> ==========================================================================
> ======
> 
> 
> 
> 
_____________________________________________________________________ 
IMPORTANT NOTICES: 
          This message is intended only for the addressee. Please notify the
sender by e-mail if you are not the intended recipient. If you are not the
intended recipient, you may not copy, disclose, or distribute this message
or its contents to any other person and any such actions may be unlawful.

         Banc of America Securities LLC("BAS") does not accept time
sensitive, action-oriented messages or transaction orders, including orders
to purchase or sell securities, via e-mail.

         BAS reserves the right to monitor and review the content of all
messages sent to or from this e-mail address. Messages sent to or from this
e-mail address may be stored on the BAS e-mail system.




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================