CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have 72 attendees signed up from 20 countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Content Security/Security Servers/CVP/UFP
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-01-04
packnet packnet is offline
Junior Member
 
Join Date: 2006-08-30
Posts: 5
Rep Power: 0
packnet has an average reputation (10+)
Default UFP Capacity - how much Websense traffic can CP handle?

We've got a particularly busy site - roughly 15,000 users, over 1000 HTTP requests per second, and roughly 40Mb of Internet bandwidth used by HTTP requests during peak.

We're running NGX HFA3 on Nokia IP560 appliances in VRRP. They currently have 1GB of RAM, we're already working on an additional upgrade to bring the total to 2GB.

We currently use proxies to make Websense calls, but that solution is having problems. I've been tasked to look at UFP from the firewalls to Websense but I'm not hearing positive things about capacity.

CP says most companies with infrastructure this large use proxies or a "bridge mode" of Websense. BlueCoat is touting an appliance with Websense built-in.

Reading this forum, I'm already seeing UFP issues that are above and beyond the capacity of the hardware.

Anyone have any thoughts on this?
Reply With Quote
  #2 (permalink)  
Old 2007-01-04
chillyjim chillyjim is offline
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,637
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: UFP Capacity - how much Websense traffic can CP handle?

I would avoid UFP. Customers I have seem to like bluecoat.

You might also want to take a look at the Enfield EA, it has content filtering built in. No idea how, or even if, it scales, but it might be worth a look.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 20:43.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0