Firewall-1

[FW-1] How many gateways can SmartCenter realistically handle?

Subject: [FW-1] How many gateways can SmartCenter realistically handle?
From: Fire Wall <fwadmin AT MAIL.TRADEWIND DOT NET>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Mon, 18 Jul 2005 11:54:08 -0400
Greetings!

Does anyone know how many gateways a SmartCenter running NG AI R54 can realistically handle?

Right now I have a Solaris 420R SmartCenter (2 CPU's, 2 gigs of RAM) that is managing about 55 rulebases (Nokias and VSX firewalls). The objects_5_0.C file is up around 4.5 megs and growing pretty rapidly with each gateway we add. The Unix load is relatively low on the system: load average: 0.21, 0.19, 0.18, even though we do a lot of logging on the firewalls.

I've heard that as the objects file gets larger and larger, and there are more rulebases, one can have problems installing policies - timeouts, failures and incomplete installations. Does anyone have any data on how many gateways one could manage, based on things like the size of the objects file and size and number of rulebases managed by the SmartCenter?

Any information would be greatly appreciated.

TIA,

TJ

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>