Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 20 replies
  • Subscribers 4 subscribers
  • Views 26501 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Real world performance on new SG100 series

HDClown
Does anyone have any real world performance experience with the SG100 series?  When I last looked into the prior UTM100 series, the general feedback I got was that they aren't really good performers and even for a small office of 10-20 users on a cable connection, they would probably noticeably slow internet access down with features such as IPS, Gateway AV, and URL Filtering enabled.

The spec sheets on the new SG100 shows a huge bump in performance over the UTM100 series, so I am looking into them again . In particular, the SG105, SG115, and SG125.  I would be looking to put in offices of 5-20 people, with a typical internet connection being 25-60 down and 1-5 up.    

I'm looking at these as possible alternative options to FortiGate 60D and 90D

Are these new boxes anywhere close to the performance in the spec sheets?  Even if they run at 50% of what's in the spec sheet with a moderate CPU load (say max of 70%), they seem like they would be viable options.


This thread was automatically locked due to age.
Parents Reply
  • 0 in reply to teched_01
    The processor in the SG115 I have on the bench is an Atom E3827 Processor @ 1.75GHz, Dual Core.  The 115 ships with 4GB of RAM.. Its what we will be standardizing on for the smallest offices.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Children
  • 0 in reply to BrucekConvergent
    Also, to answer the OP's query -- for offices with around 10 users or less, 3 or more features enabled, I would try the SG115.  When you get close to 20 users, and with heavier usage (many features enabled), start looking at SG2xx series.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    BarryG, you mention the poor performance on older Atoms (such as the N450 in your sig?).  As I recall IPS performance improvements were touted for 9.2.  Have you (or anyone else) had the opportunity to make a direct comparison on such hardware and able to share results?


    Hi,

    I haven't tested 9.2 thoroughly as I'm one of the users affected by the Intel hardware reset bug and am waiting for that to be fixed.

    I have only seen one user post throughput with 9.2x on a new Atom-based CPU (probably a new Celeron), and he was claiming somewhere around 95mbps, iirc, but he didn't specify how he tested.


    The processor in the SG115 I have on the bench is an Atom E3827 Processor @ 1.75GHz, Dual Core.  The 115 ships with 4GB of RAM.. Its what we will be standardizing on for the smallest offices.


    Thanks Bruce, I looked up that model and I now see that it's a Silvermont Atom (current generation); because it was dual-core, I had incorrectly assumed it was an older generation.
    I'm still not sure about running 60mbps through one, but definitely should be better than 20mpbs.

    Barry
  • 0 in reply to BrucekConvergent
    Also, to answer the OP's query -- for offices with around 10 users or less, 3 or more features enabled, I would try the SG115.  When you get close to 20 users, and with heavier usage (many features enabled), start looking at SG2xx series.

    I'm tempted to try a 135 to replace an expiring 220 license at one client site.  Has anyone tried a 125 or 135 in the environment that Bruce describes?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    I'm tempted to try a 135 to replace an expiring 220 license at one client site.  Has anyone tried a 125 or 135 in the environment that Bruce describes?

    Cheers - Bob


    Hi Bib,

    Will speedtest wth IPS on be a good indication?
  • 0 in reply to alexxdavid
    Will speedtest wth IPS on be a good indication?


    Hi,

    IPS ON,

    Proxy (Web Protection) OFF

    Please also see 
    https://community.sophos.com/products/unified-threat-management/astaroorg/f/52/t/29110
    and post your results.

    Barry
Unfiltered HTML