Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 4 replies
  • Answers 1 answer
  • Subscribers 41 subscribers
  • Views 1816 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XGS3300 FIREWALL

Leonardo Mota

Hello, I'm founding difficulties determining if the XGS 3300 firewall can support a 2gbps throughput in a HA cluster with 2 equipments. Can someone help me?

Also if it has a firewall throughput of at least 37 gbps;
a ips throughtput of at least 13 gbps ;
if it can admit 160.000 new connections per secound;
treat 4 milion simultaneous sessions.

 



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to Quallensaft

    Yes, but I can't find the cluster information. If 2 of them im a HA enviroment would reach 2 gbps throughput.

  • +1 in reply to Leonardo Mota

    If you're not using a 1Gb/s cable I would say yes ;-) 1Gb/s is ridiculously little for a 3300...
    Of course it makes a big difference if you have traffic without any SSL inspection, av, ips like a "stupid" router or with all checks for all the traffic activated.

    Also does not matter if you are using HA in active/active or active/passive -> 1 device will get all the traffic in any case:

    Active-passive When the primary firewall fails, the auxiliary firewall automatically takes over traffic processing, preventing downtime.
    Active-active In active-active mode, both the primary and auxiliary firewalls process traffic. The primary firewall receives all network traffic and load balances the traffic using the auxiliary firewall to handle some traffic processing. If the primary firewall fails, the auxiliary firewall takes over all network traffic processing.
Unfiltered HTML