Sizing Guideline

Astaro Security Gateway V8

This document provides a rough guideline for choosing the right Astaro Security Gateway appliance for different scenarios. As performance may vary based on user characteristics, application usage, security configurations and other factors, Astaro cannot guarantee specific performance results. Average performance numbers represent throughput values achievable with a typical traffic mix, maximum numbers represent throughput achievable under optimal conditions, e.g. with large packet sizes*.

Astaro Security Gateway Hardware Appliances

Performance Numbers Model FW (Mbps) avg/max VPN AES (Mbps) avg/max IPS (Mbps) avg/max IM/P2P (Mbps) avg/max HTTP Proxy (Mbps) avg 3) UTM (Mbps) avg RED (Mbps) max RED appliances (#) UTM/FW1) AAPs (#) avg1) WAF (Mbps) Web Requests AV scanned2) (Req./s) Emails scanned (max emails/h) Emails seen 2) (max emails/h)
1) 2) 3)
2)3)

ASG120 1,0/1,8Gbps 99/188 90/140 56 / 200 90 45 50 10/25 4 85 200 30.000 250.000

ASG 220 1,2 /2,2Gbps 260/380 120/280 120 / 494 550 65 80 20/80 8 230 775 52.000 400.000

ASG 320 2 /3,4 Gbps 300/450 190/450 180 / 556 650 125 120 40/130 16 240 1.400 78.000 600.000

ASG 425 1,4 /4 Gbps 340/500 130/550 164 / 606 700 135 160 50/190 32 275 1.500 130.000 1.200.000

ASG 525 2 /5,5 Gbps 360/530 216/800 180/612 800 200 280 90/380 64 320 1.800 200.000 1.500.000

ASG 625 3,3/10 Gbps 400/580 248/1.100 200 / 672 850 350 360 150/500 128 365 2.200 250.000 2.200.000

recommended Numbers are for single scan, throughput will decrease by 20-25%% when activating dual scan When activating additional features overall throughput will decrease roughly by the following percentage: Wireless Security: 5-10%, WAF: 10%, URL Filter: 10-15%, IPS: 60-70%

All information is based on Astaro Gateway Software Version 8 | 13/06/2011 2011 Astaro GmbH & Co. KG. Subject to change without notice 1

Sizing Guideline Astaro Security Gateway V8

Maximum Connections Model New TCP connections/sec Concurrent TCP connections Concurrent IPSec VPN Tunnels Concurrent SSL VPN Tunnels ASG120 1180 120,000 25 20 ASG 220 6400 300,000 125 35 ASG 320 12,500 600,000 400 65 ASG 425 14700 1,000,000 600 100 ASG 525 17800 1,700,000 1000 200 ASG 625 18300 2,500,000 1500 250

* For detailed information please refer to the Astaro Security Gateway - Performance Test Methodology document.

Maximum recommended users

The following numbers for maximum users are based on average usage. Please see the final section for more details. Max. Users
1)

10
ASG 110/120 ASG 110

50
80

150
ASG 220

350
300 ASG 320

1000
800 ASG 425 1500

2500
ASG 525

5000
3500 ASG 625

Essential Firewall Mail Security Web Security Network Security Full Guard
1) 2)

ASG 120

10

35

75

200

600

1300

2000

All numbers also include users connected via RED or wireless access points When activating additional features number of users will decrease roughly by the following percentage: -Wireless Security: 5-10%, Web Application Security: 10%, URL Filter: 10-15%, IPS: 60-70%

Astaro Security Gateway Software Appliances

The following table provides a rough guideline for choosing a typical system configuration when installing Astaro Security Gateway Software on Intel-compatible PCs or servers. Shown user numbers are average values for normal user traffic.

Typical System Configuration CPU Intel Atom

(1.6 GHz)

Pentium 4
(2.8 GHz)

Pent. DualCore
(2.8 GHz)

Core 2 Duo
(3 GHz)

2 * Dual Core Xeon

(2.33 GHz)

2 * Quad Core Xeon

(3 GHz)

Celeron
(1.4 GHz)

Celeron Dual Core

(2.2 GHz)

Xeon
(2.8 GHz)

Core 2 Duo
(2.4 GHz)

2 * Xeon
(3.2 GHz)

Memory Max. FW Users Max. Mail Users Max. Web Users Max. UTM Users

1 GB 80 70 40 35

1 GB 300 275 140 70

2 GB 800 750 330 200

4 GB 1500 1300 850 600

6 GB 3500 3300 2300 1300

8 GB 5000 4500 3800 2500

All information is based on Astaro Gateway Software Version 8 | 13/06/2011 2011 Astaro GmbH & Co. KG. Subject to change without notice

Sizing Guideline Astaro Security Gateway V8

Average Usage vs. Power Usage

All recommended user numbers are based on average email, web and firewall usage with parameters outlined within the table below. If usage significantly excels traffic of an average user (i.e. is a Power user) then you should choose an appliance with higher capacity according to the following rule:

If at least 3 items apply in "Power User" column use unit with next higher capacity If at least 5 items apply in "Power User" column use unit with 2 levels higher capacity

Average User Email Usage (per 10 h working day) Number of received emails in IN-Box Number of large emails Up to 50

Power User

> 50

Up to 3 emails ~ attachments 500KB

> 3 emails and/or ~ attachments 1MB

Encrypted emails

Up to 10% of all emails

> 10%

Web Usage (per 10 h working day) Downloads per user and day Up to 4 >4

Web Usage

Equally spread throughout the day

Many peaks Power Users (schools, universities, business applications) Extensive use of VOIP features and file transfer Continuous and frequent sharing of data (i.e. software distribution, live feeds)

Web Applications

Mostly Webmail / Google / News

Instant Messaging

10-15 text messages/day Infrequent downloads mostly IT department related (i.e. software updates)

Peer-To-Peer FW/VPN Usage IPS in use Number of VPN tunnels per user

No

Yes

up to 0,5

> 0.5

All information is based on Astaro Gateway Software Version 8 | 13/06/2011 2011 Astaro GmbH & Co. KG. Subject to change without notice