Arp Table Size

Question

Is there a list with the capabilities of the ARP table for evry firewall modell? For other vendors it's easy to find. 
 
 Regards 
 Robert

Aditya Patel · Answer

HI Robert 
 We do not have a current official document on the product datasheet , But We have added the Firewall Sizing Chart to check which device should you choose for your environment . 
 Since arp entry correlates to an ipaddress would the sizing guide be a 1:1 representation of arp 
 
 The net.ipv4.neigh.default.gc_thres1, 2 ,3 on my system are set to..

Thresh1 = the minimum number of entries to keep in arp cache, &ldquo;garbage collector will not run if there are fewer&rdquo; 
 
 Thresh2 = the soft max to keep, the garbage collector runs after the allowed number exceeds this for5 seconds 
 
 Thresh3 = the garbage collector will always run if there are more than this&hellip; 
 
 So our minimum is 16384 and max is 32768 
 
 Which is higher than the values in the tables noted.

lferrara · Answer

Robert, 
 it depends on your needs. Contact a Sophos Partner to understand your needs in terms of feature and budget. 
 UTM9/XG can fit on it in some cases. For example, web filtering is now working great on XG, WAF is not included on Fortigate (you need a separate appliance) and log the same (FortiAnalyzer). 
 Anyway every products have its good/bad feature sets. 
 Regards,