Sophos XGS3300 FIREWALL

Question

Hello, I'm founding difficulties determining if the XGS 3300 firewall can support a 2gbps throughput in a HA cluster with 2 equipments. Can someone help me?

Also if it has a firewall throughput of at least 37 gbps;
a ips throughtput of at least 13 gbps ;
if it can admit 160.000 new connections per secound;
treat 4 milion simultaneous sessions.

This thread was automatically locked due to age.

Quallensaft · Accepted Answer

If you're not using a 1Gb/s cable I would say yes ;-) 1Gb/s is ridiculously little for a 3300... Of course it makes a big difference if you have traffic without any SSL inspection, av, ips like a "stupid" router or with all checks for all the traffic activated. Also does not matter if you are using HA in active/active or active/passive -> 1 device will get all the traffic in any case:

Active-passive 
 When the primary firewall fails, the auxiliary firewall automatically takes over traffic processing, preventing downtime.

Active-active 
 In active-active mode, both the primary and auxiliary firewalls process traffic. The primary firewall receives all network traffic and load balances the traffic using the auxiliary firewall to handle some traffic processing. If the primary firewall fails, the auxiliary firewall takes over all network traffic processing.

it-andy · Answer

On XGS 3100 and higher you should use the 10G interfaces. Normally i always connecting 2x10G in a Link-Aggregation to the core switches (for internal network traffic). Of course you can also use a wan link over a vlan on your LAG. 
 
 Just my 2 cents

Sophos XGS3300 FIREWALL

Top Replies