[FW-1] FW-1 NG performance

[Rowan McNeil]

I am hoping someone on the list knows the answer to this:   Checkpoint have recently announced that with the SecureXL architecture even a standard server can sustain very impressive throughput performance. For example, FP-1 is claimed to reach 1.7Gbps throughput on a dual proc 1.7GHz Xeon server.   However, the only indication on test methodology is that this performance was measured using non fragmented UDP packets. Furthermore, the following link http://www.checkpoint.com/products/security/platforms/linux17ghzxeon.html indicated that the server that was used only has two 1Gbps adapters, so it is obvious throughput cannot go over 1Gbps.   This is bewildering. Can anyone explain the seemingly unachievable numbers? Does anyone has experience with FP-1 performance with real life traffic?   -- R --