Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


networkn

Networkn
32349 posts

Uber Geek

ID Verified
Trusted
Lifetime subscriber

#199231 9-Aug-2016 14:00
Send private message

Hi. 

 

Anyone got this paired with a UFB 200/200 Service who could briefly run a Speedtest with and without UTM services enabled please?

 

 


Create new topic
engedib
254 posts

Ultimate Geek


  #1609998 11-Aug-2016 11:07
Send private message

Do you have a specific model number?

 

Their performance can vary based on the model, and we found that the older devices (TZ205, etc) are very-very slow with UFB. Had to replace quite a few of them to get the full bandwidth out of the UFB connection.





MCSE+M/S, MCITP




networkn

Networkn
32349 posts

Uber Geek

ID Verified
Trusted
Lifetime subscriber

  #1610001 11-Aug-2016 11:13
Send private message

engedib:

 

Do you have a specific model number?

 

Their performance can vary based on the model, and we found that the older devices (TZ205, etc) are very-very slow with UFB. Had to replace quite a few of them to get the full bandwidth out of the UFB connection.

 

 

Yes, the Sonicwall SOHO (It's called that).


michaelmurfy
meow
13240 posts

Uber Geek

Moderator
ID Verified
Trusted
Lifetime subscriber

  #1610009 11-Aug-2016 11:29
Send private message

The SOHO (in just firewall mode - without content filtering or UTM) can route 200/200Mbit however this is pushing it to its limits. As soon as you enable UTM this will drop down to ~60-80Mbit. Really, not suitable for a UFB connection and rather suited for a small office lets say 50Mbit connection. They're not fast devices.

 

Take a look at the Fortinet products - they're fast (ASIC powered) and also have very good firmware Here. The local NZ supplier (Ingram Micro) was pretty happy to provide me with one for a couple of months for testing.





Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.




networkn

Networkn
32349 posts

Uber Geek

ID Verified
Trusted
Lifetime subscriber

  #1610011 11-Aug-2016 11:31
Send private message

michaelmurfy:

 

The SOHO (in just firewall mode - without content filtering or UTM) can route 200/200Mbit however this is pushing it to its limits. As soon as you enable UTM this will drop down to ~60-80Mbit. Really, not suitable for a UFB connection and rather suited for a small office lets say 50Mbit connection. They're not fast devices.

 

Take a look at the Fortinet products - they're fast (ASIC powered) and also have very good firmware Here. The local NZ supplier (Ingram Micro) was pretty happy to provide me with one for a couple of months for testing.

 

 

 

 

We have Sonicwall everywhere else, so I am not keen to switch brands and Fortinet are just as expensive or more so than Sonicwall. We are evaluating Sophos UTM appliances right now, and they are pretty slick despite the brand being pretty poor in terms of reputation. They are likely to be our low cost alternatives. 


michaelmurfy
meow
13240 posts

Uber Geek

Moderator
ID Verified
Trusted
Lifetime subscriber

  #1610014 11-Aug-2016 11:36
Send private message

The Sophos UTM appliances are indeed pretty good too. Depending on what you're doing (if it is just content filtering) the Edgerouter (believe it or not) is another option with its DPI L7 firewalling however won't scan for malware etc. I did really like the Fortinet products but yes they're expensive but they were almost wire speed on the connections I tested.

 

Another one is the Meraki line of routers except the entry level products won't be suitable for 200/200Mbit UFB.





Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.


networkn

Networkn
32349 posts

Uber Geek

ID Verified
Trusted
Lifetime subscriber

  #1610015 11-Aug-2016 11:39
Send private message

michaelmurfy:

 

The Sophos UTM appliances are indeed pretty good too. Depending on what you're doing (if it is just content filtering) the Edgerouter (believe it or not) is another option with its DPI L7 firewalling however won't scan for malware etc. I did really like the Fortinet products but yes they're expensive but they were almost wire speed on the connections I tested.

 

Another one is the Meraki line of routers except the entry level products won't be suitable for 200/200Mbit UFB.

 

 

And Meraki are subscription based. No pay, no device. I won't sell products that work like that in good conscience. I don't mind paying for extra features, support, subscription for security services, I won't pay a sub for basic device functionality. 

 

I don't like the UI/Rules config on the edge routers, I think the Sonicwall, and Sophos are easier for our juniors to understand and manage too. 

 

 


vulcannz
436 posts

Ultimate Geek
Inactive user


  #1614666 19-Aug-2016 21:47
Send private message

SonicWALLs have better than an ASIC, they use Cavium Octeons (same network CPUs used in Palo Altos).

 

x86 = crap layer 3 performance, abysmal layer 7/DPI performance

 

ASIC = excellent layer 3 performance, meh Layer 7/DPI performance

 

Cavium = excellent Layer 7/DPI performance, good layer 3 performance.

 

 

 

The Soho is an older gen Cavium, the Soho W and up have the newer gen Cavium more suitable for UFB. On a 200/200 circuit with Intrusion Prevention/Gateway Antivirus/Gateway AntiSpyware/App Control/Web Filtering a 200Mbps download would load the CPU to ~ 50%. The comparible Fortigate 60D is spec'd at around 23Mbps (on Fortinets own datasheets).

 

The Cavium is also orientated to multicore operation (the little ones only have 2 cores, big ones scale up to 64). So on a single stream test the Fortinet may run a higher speed single core stream so does better. In real world multistream testing the Cavium shines. Also the Forti ASICs aren't always what they claim to be, if you need some bedtime reading check this: http://docs.fortinet.com/uploaded/files/2855/fortigate-hardware-acceleration-54.pdf

 

So if you want a plain layer 3 firewall, Fortigate, if you want to run the security services, SonicWALL. I would not touch sophos with a barge pole, they regularly fail independent testing (don't believe the miercom tests, they are paid for by vendors). Look at NSS Labs tests as a good guide. Sophos is also x86 based so DPI performance is attrocious.

 

Cisco... maybe if you want to NSA/Chinese/Russians in your network: http://www.networkworld.com/article/3109165/security/cisco-fortinet-issue-patches-against-nsa-malware.html

 

You should also start checking SSL decrypt performance, it's becoming important for malware protection now.

 

 

 

 


Create new topic





News and reviews »

Air New Zealand Starts AI adoption with OpenAI
Posted 24-Jul-2025 16:00


eero Pro 7 Review
Posted 23-Jul-2025 12:07


BeeStation Plus Review
Posted 21-Jul-2025 14:21


eero Unveils New Wi-Fi 7 Products in New Zealand
Posted 21-Jul-2025 00:01


WiZ Introduces HDMI Sync Box and other Light Devices
Posted 20-Jul-2025 17:32


RedShield Enhances DDoS and Bot Attack Protection
Posted 20-Jul-2025 17:26


Seagate Ships 30TB Drives
Posted 17-Jul-2025 11:24


Oclean AirPump A10 Water Flosser Review
Posted 13-Jul-2025 11:05


Samsung Galaxy Z Fold7: Raising the Bar for Smartphones
Posted 10-Jul-2025 02:01


Samsung Galaxy Z Flip7 Brings New Edge-To-Edge FlexWindow
Posted 10-Jul-2025 02:01


Epson Launches New AM-C550Z WorkForce Enterprise printer
Posted 9-Jul-2025 18:22


Samsung Releases Smart Monitor M9
Posted 9-Jul-2025 17:46


Nearly Half of Older Kiwis Still Write their Passwords on Paper
Posted 9-Jul-2025 08:42


D-Link 4G+ Cat6 Wi-Fi 6 DWR-933M Mobile Hotspot Review
Posted 1-Jul-2025 11:34


Oppo A5 Series Launches With New Levels of Durability
Posted 30-Jun-2025 10:15









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.