While I wouldn't call myself an expert I do have some basic rules of thumb that generally seem to fit.
Unless you have some really exotic users I doubt that 700 users would cause an undue burden on a 330. Truth is that you are really limited by the WAN interface regardless of the number of users. So basically you are constrained, with a normal config, to using a T-1. A single T-1, in almost any scenario, will not choke a 330. However if you were to try and use the 330 as an internal Firewall protecting separate 100 Mb/s networks you would quickly choke the 330.
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, May 23, 2000 1:10 PM
> To: Rogue Bolo; [EMAIL PROTECTED]
> Subject: [FW1] It's fixed!!! was: Nokia IP330 crashing
>
>
>
>
> Well yes it is possible that our vendor had "done us wrong".
> They did recommend
> the box. We were debating continuing to deploy NT or switch
> to this Nokia. A
> statement was made that this low end Nokia would outperform
> what we were
> considering for NT (a dual-process PIII 500 with 512mb RAM).
>
> The Nokia was replaced because it was defective. It appears
> to have been a
> hardware problem of some kind. It's been running rock steady
> for 5 day now
> (certainly no record but a far sight better than before).
>
> To continue this sizing issue what is used in determining if
> the box is too
> small? Amount of memory in the box, processor size,
> interfaces? What can I look
> at on the machine to see if we are reaching maximums? VMSTAT
> say's things are
> just fine. Would FW CTL PSTAT tell me anything useful?
>
> Since I can't appear to take someone at their word based on
> their expertise
> (so-called) I'm left to my own devices.
>
> ______________________________________________________________
>
> Greg Winkler
> Systems Manager, IT&S
> Huntsman Corporation
> Internet Mail: [EMAIL PROTECTED]
> Voice: (713) 235-6018
> Fax: (713) 235-6890
>
>
>
> ____________________Reply Separator____________________
> Subject: Re: [FW1] Nokia IP330 crashing
> Author: Rogue Bolo <[EMAIL PROTECTED]>
> Date: 5/23/2000 8:26 AM
>
> An ip330 is NOT meant for 700 users. It is meant for
> small business and remote offices. It was designed
> with a C class size user base in mind. This is evident
> when you look at the Remote Link products. The RL50
> and RL250 are on the IP330 chassis. The RL500 and RL-U
> are both on IP440 chassis. You sized your networks
> security requirement completely wrong. I would take
> this up with your vendor as they have done you wrong.
>
> --- [EMAIL PROTECTED] wrote:
> >
> >
> > Our nokia IP330 is crashing. It's been sick now for
> > a month or so. But it's
> > really on it's deathbed now. Our vendor has
> > collected the crash files and sent
> > them to Nokia for review. They seem to think the
> > firewall is too small for the
> > number of connections we want to pass through it.
> > I've been checking the number
> > of connections with "fw tab -t connections -s" and
> > the max I've seen is less
> > than 500. We are only passing about 700 users
> > through this thing. I can't for
> > the life of me believe that the nokia can't handle
> > this.
> >
> > Anyone know how many connections an IP330 can
> > support.
> >
> >
> ______________________________________________________________
> >
> > Greg Winkler
> > Systems Manager, IT&S
> > Huntsman Corporation
> > Internet Mail: [EMAIL PROTECTED]
> > Voice: (713) 235-6018
> > Fax: (713) 235-6890
> >
> >
> >
> ==============================================================
> ==================
> > To unsubscribe from this mailing list, please
> > see the instructions at
> >
> > http://www.checkpoint.com/services/mailing.html
> >
> ==============================================================
> ==================
> >
>
>
> __________________________________________________
> Do You Yahoo!?
> Send instant messages & get email alerts with Yahoo! Messenger.
> http://im.yahoo.com/
>
>
> ==============================================================
> ==================
> To unsubscribe from this mailing list, please see the
> instructions at
> http://www.checkpoint.com/services/mailing.html
> ==============================================================
> ==================
>
***********************************************************************
Gruntal & Co., L.L.C.'s e-mail system is for business purposes only.
Messages are not confidential. All e-mail may be reviewed by
authorized supervisors, compliance or internal audit personnel.
E-mail will be archived for at least three years and may be produced
to regulatory agencies or others with a legal right to access such
information. Gruntal will not accept trade order instructions via
e-mail. Please telephone your Account Executive to place trade orders.
Gruntal & Co., L.L.C.
***********************************************************************
