This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Hardware Requirments / SSD Support?

Hello all

I’m planning to build a Home-Office ASG out of the following components:

Chassis Supermicro CSE-513L-260B (schwarz)
Mainboard Supermicro X7SPE-H-D525
2.5" Hard Drive Mounting Kit Supermicro CSE-PT73
Risercard Supermicro RSC-RR1U-E16
Memory Supermicro Kingston ValueRAM, 2 GB, DDR3-1066, CL7, SODIMM
Disc OCZ OCZ SSD Vertex 2 Extended Cap. 60GB, SATA-II, 2,5 Zoll, MLC
NIC HP HP NC7170 Dual Port PCI-X Gigabit Server Adapter (available already)

Can anyone confirm that the above hardware would work for ASG V8.1 ?

Requirements for four (4) users would be (full program of):
- xDSL Access 20/2 Mb
- Firewall (40 Rules and 1 GB throughput)
- HTTP(S) Proxy, dual Virus scanning
- POP3 Proxy, dual Virus scanning (no SMTP Proxy)
- IDP
- VLAN Support
- Syslog logging
- SSL VPN
- Websecurity
- DMZ with Torent/Mule & Co.

In detail I would be very interested if anybody has some experience with SSD’s (reliability / long term performance / …). As far as I know ASG does support Trim as of V8 – right?

Please find below the product link to the SSD I would like to use:
OCZ Vertex 2 SATA II 2.5" SSD OCZ Technology
Thanks in advance for and comments, hints and thoughts….

Regards
Blm

This thread was automatically locked due to age.

Parents

0 blm over 14 years ago

Thanks BarryG

What do you think would be the max throughput?

Are I'm right, if I add all internal networks (VLAN's) under IPS (Network Security > Intrusion Prevention > Global > Global IPS settings) as internal networks, there will no inspection between these networks and performance should be increased?

Thanks Blm
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 14 years ago in reply to blm

Thanks BarryG

What do you think would be the max throughput?

Are I'm right, if I add all internal networks (VLAN's) under IPS (Network Security > Intrusion Prevention > Global > Global IPS settings) as internal networks, there will no inspection between these networks and performance should be increased?

No, the internal networks are the networks which WILL be protected by the IPS.

You CAN create exclusions to skip scanning of traffic between LANs however.

If you look at the specs for the Astaro appliances,
Astaro Security Gateway Hardware Appliances
you will see that you can get gigabit performance out of all but the lower-end models.
i.e., an i5 CPU should be fine.

However, make sure you use good NICs also, e.g. Intel or Broadcom.
Many cheap NICs such as Realtek or Marvell rely on the CPU too much.

If you don't mind adding IPS exceptions for all the LAN-LAN traffic, then an Atom CPU in the 500 series should still be OK.

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BarryG over 14 years ago in reply to blm

Thanks BarryG

What do you think would be the max throughput?

Are I'm right, if I add all internal networks (VLAN's) under IPS (Network Security > Intrusion Prevention > Global > Global IPS settings) as internal networks, there will no inspection between these networks and performance should be increased?

No, the internal networks are the networks which WILL be protected by the IPS.

You CAN create exclusions to skip scanning of traffic between LANs however.

If you look at the specs for the Astaro appliances,
Astaro Security Gateway Hardware Appliances
you will see that you can get gigabit performance out of all but the lower-end models.
i.e., an i5 CPU should be fine.

However, make sure you use good NICs also, e.g. Intel or Broadcom.
Many cheap NICs such as Realtek or Marvell rely on the CPU too much.

If you don't mind adding IPS exceptions for all the LAN-LAN traffic, then an Atom CPU in the 500 series should still be OK.

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data