 What is a resonable number of drops?
Hi All!
We have CP NGX R60 on six firewalls. The total number of packets we see in the Smart Tracker each day is on the order of 2.5-3.5 million packets. Across all of the firewalls we have on the order of 2-3000 drops between 150 nodes for those cases where we cannot immediate determine the cause (e.g incorrectly configured applications). My boss wants to get the drops down to 0. Although I imagine that this is theoretically possible, I believe that it is either unrealistic or we are going to be spending all of our time chasing ghosts in the hardware looking for the cause of the last few packets.
With that said, I have been looking for some numbers that I can use a base. That is, what percentage of drops is "acceptable"? Granted 500 drops from one machine to a specific machine with 500 different ports means something a lot different than 500 random ports on different machines. However, I am looking for a number that I can use as a guide.
Any info is appreciated.
Regards,
jimmo |