Firewalls

[RogueRunner]

We are in the process to upgrade our firewall. Been a one vendor house since I started but their newest offering failed our POC. So now the question to the firewall admins out there, what do you run, why and what are the issues you have with yours? Must be able to do at least 10Gbps throughput in christmas tree mode, ie everything switched on, with growth potential!

Leaning towards PaloAlto here but they cannot provide a POC box in the foreseable future.

 

[syntax]

We are in the process to upgrade our firewall. Been a one vendor house since I started but their newest offering failed our POC. So now the question to the firewall admins out there, what do you run, why and what are the issues you have with yours? Must be able to do at least 10Gbps throughput in christmas tree mode, ie everything switched on, with growth potential!

Leaning towards PaloAlto here but they cannot provide a POC box in the foreseable future.

That is a fairly high throughput requirement.
What UTM features are you looking to use?
virtualization of the firewalls? If so, how many
Interface requirements?
Any dynamic routing requirements?

What exactly are you trying to PoC? The throughput capability, security capabilities ?

 

[RogueRunner]

Previous POC failed on throughput, was only getting 200 odd Mbps and was looking for at least 2000Mbps on a single thread as a test or realistically port speed (1000Mbps) for throughput.

 

[paul5186]

Must have a nice budget How about Fortigate? They claim over 10Gbps firewall throughput. We use the Cisco meraki's - but only rated up to 1Gbps through the firewall.

 

[jamacouve]

We are in the process to upgrade our firewall. Been a one vendor house since I started but their newest offering failed our POC. So now the question to the firewall admins out there, what do you run, why and what are the issues you have with yours? Must be able to do at least 10Gbps throughput in christmas tree mode, ie everything switched on, with growth potential!

Leaning towards PaloAlto here but they cannot provide a POC box in the foreseable future.

10Gbps NGFW throughput ?

 

[irBosOtter]

Must have a nice budget How about Fortigate? They claim over 10Gbps firewall throughput. We use the Cisco meraki's - but only rated up to 1Gbps through the firewall.

I'm a Fortigate fan, but hell, if you looking for 10Gb throughput with everything on then you gonna have to buy their top of the line units, not even sure if it will handle 10Gb once everything is switched on!

 

[Zipkoppie]

I'm a checkpoint fan and they have several models that can do 10Gbps+ but you'll need a big budget, once you add up the cost of the appliance plus the licensing it's going to cost a small fortune.

https://www.checkpoint.com/downloads/product-related/brochure/br-appliances.pdf

 

[DWPTA]

Prepare to spend if you want 10Gb throughput.

Getting my Checkpoint 3200 in about 2 weeks time. We do high throughput as well and this will suffice and allow growth too