Topic Thread

Fortinet Documentation

 View Only
Expand all | Collapse all

Performance Values more details than in Datasheet and KB?

  • 1.  Performance Values more details than in Datasheet and KB?

    Posted 11 days ago
    Hi,

    In the datasheets the following is listed.

    a


    b
    In the KB Fortinet enterprise Mix is documented.
    https://kb.fortinet.com/kb/documentLink.do?externalID=FD44032

    https://kb.fortinet.com/kb/documentLink.do?externalID=FD44032



    Very hard to make recommendations and size it correctly as most requirements are today to specify in detail how to guarantee 5Gbps / 10 Gbps current recommendations with SSL Inspection and exact nature of traffic tested.

    Also one would like to see the difference between IPS Engine and Proxy Engine.

    How to approach it, without doing a POC?




    ------------------------------
    Thx
    ------------------------------


  • 2.  RE: Performance Values more details than in Datasheet and KB?

    Posted 10 days ago

    Hi Patrick, I empathize with your dilemma.  However, what the datasheets reflects is an "average" traffic pattern for an Enterprise customer and a related suggestion to the amount of throughput each of FortiGates is able to protect.

    There are things like new sessions per second, concurrent sessions, packet size, application type, IPS policy etc.. that can have an affect on overall throughput numbers.  However, we've found that the average Enterprise customer can expect performance numbers in line with the datasheet numbers.  It's also why we recommend doing some type of sizing exercise or POC to get very specific.

    IMO, the easy approach is to add 15-20% to the desired maximum bandwidth and it will be fine is a majority of situations.

    Hope this helps,




  • 3.  RE: Performance Values more details than in Datasheet and KB?

    Posted 10 days ago
    Hi Bryan,

    Many thanks for your answer.

    I do like the current numbers and categories.  

    It's just that the fielded questions usually are about sustained threat protection (meaning all security features (including proxy not only flow based) turned on, with a tuned general IPS and WAF signature set) and 100% encryption for 5, 10, 20, 40, 100 Gbps. 

    Are there any plans to update the Fortinet Enterprise Mix?




    ------------------------------
    Thx
    ------------------------------



  • 4.  RE: Performance Values more details than in Datasheet and KB?

    Posted 7 days ago
    The best way to illustrate real world performance is constantly being evaluated.  There is unfortunately not a "one size fits all" for firewall performance so the testing with what is seen as a majority of customer use cases is what is published.


    Cheers,