Re: [FW-1] Checkpoint and Internet bandwidth

[Volker Tanger <volker.tanger@FW1-NOSPAMDISCON.DE>]

Greetings!

Alexander Fabri wrote:

>             Is it true that Checkpoint takes 40% of your available
>             Internet bandwidth, and if so is there anything that can be
>             done to reduce it?
>
> Your reaction was the same as mine .. but my manager insisted that this
> was true (a friend of his told him so), and he could not accept no as an
> answer, and made me doubt as well.


There is a small delay for each packet going through a packet filter -
somewhere between 100 and 1500 us (MICROseconds) IIRC. But this is true
(with small variations in the actual times) for any other active device
- let it be router or switch or whatever. If you have an AntiVirus or a
ContentFilter, the additional delays will be bigger.

If a platform is waaay to small then CPU loads needed may exceed the
power given. But for an average/current x86 or Sun these loads will have
to be on the far side of 100 Mbit/s to saturate packet-filtering. And I
guess your internet access is (much) slower...

OTOH:

Where the 40% actually can hold is, when the Checkpoint is used to
create a transparent proxy. Proxies can serve ~30-50% of connections out
of the local storage and thus "TAKE 40% OF THE INTERNET TRAFFIC" - but
make it faster by the same ammount, not block it.

Bye

       Volker

--

Volker Tanger  <volker.tanger@discon.de>
 Wrangelstr. 100, 10997 Berlin, Germany
    DiSCON GmbH - Internet Solutions
         http://www.discon.de/

=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
If you have any questions on how to change your
subscription options, email Ron Alcatraz at:
ralcatra@ts.checkpoint.com
=================================================