Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 4 subscribers
  • Views 5158 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

sophos utm sg135 IPS throughput

Cetrix

Hi, 

One of our branch Offices have a sg135 and now upgraded their internet connection to 250Mbit/s

It seems, that the Sophos can not handle that speed with activated Intrusion Prevention. With that activated they only get ~100Mbit/s.

 

On the sophos Factsheets they write a throughput of 1500Mbit for IPS and I also don't see a high CPU load on the device. 

Is this a configuration issue?

 

I only have this one device of that kind, so I am missing the experience of what this devices are capable.



This thread was automatically locked due to age.
  • 0

    Hallo,

    That will be about the best you can do for a single-threaded test.  If you had three, separate PCs running the test simultaneously, you would see the pipe filled.  I doubt you could get the pipe filled with a single tester even with Snort disabled.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    Hi Bob,

    I tested that and you are right. 

    But is that limit general in every appliance, or is it depending by the appliance.

    If it's depending on the appliance, where can I find information about which appliance will give me which throughput?

     

  • 0 in reply to Cetrix

    It's a combination of issues as to what solution delivers the needed performance.  For example, the SG 135 (quad core) will out-perform an SG 210 (dual core) if the measurement is total throughput for an office.  If the fastest throughput for a single connection is the criterion, the 210 wins because its CPU runs at higher GHz.  If an office with a limited number of IPs needs both, a software license on a very fast device with a quad-core CPU or two is the most cost-effective solution.  A good reseller will help you make a good choice.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Unfiltered HTML