Crossbeam : maximum NAT connections on AMP in X-serie

[underattack]

Hello,

Does anyone know what is the maximum concurrent NAT connections per AMP on a X-serie Crossbeam ?

Regards,

[underattack]

Hi,
Obviously it is APM and not AMP...
Regards,

[cpcpc]

it depends...

How many memory on the APMs?

[underattack]

Hello,

I don't have the specification yet. Would you have this info for different kind of APM ?

Regards

[cpcpc]

You should ask Crossbeam support for the details.

From my experience, assume you have 512m memory, with NAT, it should be around 40-50k.

[underattack]

The APM should be : CROSSBEAM APM-8400 Single P-IV Xeon with 4 GB DRAM (4x1 GB) APM-8400-1P4-4G-2

Regards,

[cpcpc]

should be more or less than half meg

[cjbischoff]

Depending on the type of NAT (many-to-one or one-to-one) you might have additional resources that are used (HIDE NAT tracking is done via ports).

Per SecureKnowledge
Solution ID: sk618
What are some of the per connection memory statistics for FireWall-1 4.1?

Here are some of the averages per connection:
FireWall hash memory (fwhmem):
~70 bytes per simple connection
+100 bytes per connection using NAT
+170 bytes per connection using Security Servers
Kernel memory:
+50 bytes per VPN connection
+3 KB per VPN key exchange
+8 KB per connection using Security Servers for the TCP/IP stack
On average, a simple connection will use approximately 70 bytes of FireWall hash memory (fwhmem).

Just add the total RAM from the APM(s) then divide by the worse case scenario (+170) and that should give you a rough idea.