
Performance
Performance
Enhanced Architecture
Enhanced Architecture
Optimized for real life usage scenarios
Optimized for real life usage scenarios
Improvements since ISA Server 2000
Improvements since ISA Server 2000
¾
¾
Kernel
Kernel
-
-
mode data pump
mode data pump
¾
¾
User
User
-
-
mode optimizations
mode optimizations
¾
¾
Up to +150% (2.5X faster) for firewall (
Up to +150% (2.5X faster) for firewall (
SecureNAT
SecureNAT
) traffic
) traffic
¾
¾
Up to +250% (3.5X faster) for Web (transparent) proxy traffic
Up to +250% (3.5X faster) for Web (transparent) proxy traffic
¾
¾
1,000,000+ concurrent connections
1,000,000+ concurrent connections
Scale up with additional CPUs
Scale up with additional CPUs
Network Computing Magazine
app. layer firewall review (3/03):
Full inspection performance [Mbps]
Symantec FW 7.0
67
122
127
170
Sidewinder
Checkpoint NG FP3
ISA 2000 FP1
Raw throughput performance
How?
• Design improvements
• IP Stack improvements
• Hardware improvements
(raw thru-put measured using HTTP+NAT benchmark)
2-proc, 4 NICs250 Mbps
@ 600 cps
HTTP Filtering
4-proc, 6 NICs4.6 GbpsKM tput, 9000 MTU
2-proc, 4 NICs1.65 GbpsKM tput, 1500 MTU
Details ResultsTest
Comentarios a estos manuales