Hi: Instead of buying quad Processors I would buy SecureXL boards for each machine, thay have Network Processores and encryption processores for the VPNs. I have 2 DELL 2600 with 2 Xeon 3.2Ghz and 4Gb memory and 72Gb disks, and the machines didn�t perform good enough until I got the SecureXL boards. One thing to remember is the PCI buses on the machines (66Mhz 100Mhz and 133Mhz), except for DELL all the other machines from HP, SUN and IBM have few 133Mhz busses on their machines, so in my point of view you get the best perfomance/price ratio with Dell Tower Machines converted to Rack if you need to put it in racks. For the type of VPN throughput you are looking at the SecureXL board as the only thing that can give you those kinds of figures. You won�t gain much in using 4 processores because normally you only have 2 "fw" processes working at a given time.
2 Machines with ClusterXL each one with 2 processors and 2 SecureXL boards is my configuration and would probably be your best bet. Best regards, Paulo Vieira -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Kierstead, Wade Sent: quinta-feira, 3 de Mar�o de 2005 4:00 To: [email protected] Subject: Re: [FW-1] dual CPU versus Quad CPU box for Super Secureplatform Firewall To me this seems pretty light on the drive space, especially with 40 remotes. We use all HP gear, 148 Gig x 15000 rpm drives. Is the 80 Gig the best Dell offers? -----Original Message----- From: cisco4ng [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 02, 2005 6:16 PM To: [email protected] Subject: [FW-1] dual CPU versus Quad CPU box for Super Secureplatform Firewall I would like to build a super SPLAT box. This box will have 4GB of RAM on it with RAID 1 80GB disk storage. This super SPLAT box will be managed by my provider-1 NG with AI R55W. This box will be a VPN hubs to about 40 remote VPN devices (mainly Cisco Pix and VPN Concentrators) and remote access VPN using AES-256/DH-5/SHA-1. We're talking about 400 Mbps VPN throughput. At the moment, I have the option of going with either a dual CPU machine or a quad cpu machine (dell in both cases). We're talking about Xeon processors With SPLAT, I have the option to use the other CPUs for VPN Encryption/Decryption. What should I go with? Dual Processor or Quad processor box? Can SPLAT take advantage of quad CPU machine or dual CPU can handle the task? I don't see any bench mark testing on dual versus quad CPU box on SPLAT. Thanks. P.S. We're talking about redundancies in this configuration and we might talk about going Active/Active with ClusterXL __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
