This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

traffic handle

actually i tried pfsense,vyatta to deploy them as IPS , they work fine except one thing that the cpu get 97% when traffic reach 100 MB . So what about astaro is there is any deference in snort performance in it or in the commercial version??? need fast reply please

This thread was automatically locked due to age.

0 Billybob over 16 years ago

The memory footprint will be almost the same if snort is used on any distro with the same processing power. In astaro v6, the ac method was mwm and in v7 lowmem is used with 1GB RAM on my machine by default. With snort the main concern for most folks is memory usage and startup times.

If your cpu is spiking that high, its time to get a more powerful machine, and if you have a 100mb dedicated line, you would be better off with a dedicated snort machine instead of deploying astaro just for its IPS capabilities.[:)]
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 16 years ago

I have a flyer from 2007 named "ASG_V7_web_us.pdf" which says the Astaro 220 appliance can do 120mbps IPS throughput, and the bigger appliances much more.

Tuning the IPS to only include services you need to protect also helps greatly.

What hardware are you using?

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 16 years ago in reply to BarryG

Also see
Astaro Security Gateway Model Comparison - All-in-One Unified Threat Management Solutions for Complete Network Security, Web Security and Mail

The layout, at least in FireFox 3, is terrible, but it says a current model 220 can do 190mbps on the IPS.

Barry
Cancel
Vote Up 0 Vote Down

Cancel