Which model can support at least 1Gb "real world" firewall performance?
Freshman Member
Hi,
Which VPN series model (or, if necessary another series like USG) can consistently achieve >1Gb SPI throughput from WAN to LAN with at least ADP enabled? We want locally connected users to be able to take advantage of the full ISP connection and not be slowed down by the firewalls.
The specifications suggest that the VPN50 would be too slow, but that the VPN100 is supposed to be able to support up to 2Gbps. Since that is a best-case scenario UDP test I don't know what to expect in typical usage under real-world conditions though.
Which VPN series model (or, if necessary another series like USG) can consistently achieve >1Gb SPI throughput from WAN to LAN with at least ADP enabled? We want locally connected users to be able to take advantage of the full ISP connection and not be slowed down by the firewalls.
The specifications suggest that the VPN50 would be too slow, but that the VPN100 is supposed to be able to support up to 2Gbps. Since that is a best-case scenario UDP test I don't know what to expect in typical usage under real-world conditions though.
0
Best Answers
-
>1G you mean to use WAN trunk or?? Since a single interface supports up to 1G only
In my office, I'm using VPN 100 and the Down/Up speed (speedtest) is around 900Mbps/700Mbps5 -
VPN 100 could be more cost effective, at least in my office it can achieve around 80% when the firewall function is "on"5
Master Member
All Replies
-
>1G you mean to use WAN trunk or?? Since a single interface supports up to 1G only
In my office, I'm using VPN 100 and the Down/Up speed (speedtest) is around 900Mbps/700Mbps5 -
Yes I want to be able to achieve basically wire-speed for a single 1Gb WAN link without the firewall slowing throughput, and ideally have at least a little extra firewall performance headroom if we decide to load-balance two ISP connections (in that case, ideally being able to support two clients pulling close to 1Gb simultaneously, but I know that's too much to ask from the VPN100).
Since VPN300 is basically double the cost per device, we'd prefer to use VPN100, but only if it can actually support a full 1Gb WAN in the real world. At the higher price range of the VPN300, there are other competing products to also consider.0 -
VPN 100 could be more cost effective, at least in my office it can achieve around 80% when the firewall function is "on"5
Categories
- All Categories
- 415 Beta Program
- 2.5K Nebula
- 152 Nebula Ideas
- 101 Nebula Status and Incidents
- 5.8K Security
- 296 USG FLEX H Series
- 281 Security Ideas
- 1.5K Switch
- 77 Switch Ideas
- 1.1K Wireless
- 42 Wireless Ideas
- 6.5K Consumer Product
- 254 Service & License
- 396 News and Release
- 85 Security Advisories
- 29 Education Center
- 10 [Campaign] Zyxel Network Detective
- 3.6K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 87 About Community
- 76 Security Highlight
