PIX 515 productivity

shmankevich · ‎08-17-2007

Hi everyone,

The situation is as follows:

My transfer rate is 4-5 times slower if I am behind my firewall comparing to bypassing it.

Memory usage is 30% of total.

CPU usage is in 1-3%.

Is it a normal situation or we just use the wrong equipment and need to implement some more powerfull solution?

Thanks,

Vlad

rigoberto.cintron · ‎08-17-2007

Check to that firewall connections are set to 100Mbps Full Duplex in the switches and the firewall.

dhucaby · ‎08-17-2007

What PIX software release are you running?

Thanks,

Dave H

shmankevich · ‎08-22-2007

it's 6.3(4). Unfortunately there is no way I can upgrade it.

anandramapathy · ‎08-22-2007

The firewall does statesful inspection, It has to check each & every packet, Maintain the state connection, So it would definitely be slower than Direct Communication.

What trasfer are you doing ? If it something like Microsoft file transfer then it is very chatty & the Firewall adds to the Delay.

Try to change the Window size of the TCP connection on both sides ( Usually a registry tweaking on the OS / application helps )