CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > SmartView Monitor/SmartView Status
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-08-19
Junior Member
 
Join Date: 2006-06-21
Posts: 5
Rep Power: 0
tobes has an average reputation (10+)
Default Viewing VPN Encrypted or Traffic Throughput

Hi

According to the CP help NGX R65 the figure displayed in the panel as throughput peak is the peak throughput in mbps. According to my stats I am seeing a peak of over 600mbps from a VPN that is on a 1mb link.

Is there something wrong here?

Is there an easy way to calculate the bandwidth consumed by VPN traffic other than sniffing a mirrored port?

Thanks
Reply With Quote
  #2 (permalink)  
Old 2008-08-19
Senior Member
 
Join Date: 2007-07-16
Posts: 617
Rep Power: 2
Thorpuse has an average reputation (10+)
Default Re: Viewing VPN Encrypted or Traffic Throughput

Check your cases here - there's a pretty significant difference between a 1mb and 1mB (megabit vs megabyte...). 600 mbps over a 1mB connection would seem about right to me.....
Reply With Quote
  #3 (permalink)  
Old 2008-08-19
Junior Member
 
Join Date: 2006-06-21
Posts: 5
Rep Power: 0
tobes has an average reputation (10+)
Default Re: Viewing VPN Encrypted or Traffic Throughput

I understand what you are saying but network speeds are generally measured in bits not bytes. The latter being used in data storage.

A 1mbit WAN link is operating at theoretical 1,000,000 bits/sec, or 1000Kbits/sec

According to Checkpoint's help the figure I am seeing is over 600mbps which is 600 x 1,000,000 bits/sec.

This equates to a ridiculous figure so something would appear amiss. Your theory would make more sense although it doesnt explain it.

Any ideas anyone?
Reply With Quote
  #4 (permalink)  
Old 2008-08-19
Senior Member
 
Join Date: 2006-01-25
Posts: 920
Rep Power: 3
melipla has an average reputation (10+)
Default Re: Viewing VPN Encrypted or Traffic Throughput

Are you only looking at the external interface? That option is unchecked by default. Also, once you run the query, go into its properties and select which bandwidth meter you want to use, that way you can be sure of what measurement you're seeing.

Otherwise if there are A LOT of really small connections then possibly its skewing the throughput results. But that's a very hypothetical situation. I have yet to see any problems with Smartview Monitor's numbers when I use it...
__________________
Its all in the documentation.
Reply With Quote
  #5 (permalink)  
Old 2008-08-20
Junior Member
 
Join Date: 2006-06-21
Posts: 5
Rep Power: 0
tobes has an average reputation (10+)
Default Re: Viewing VPN Encrypted or Traffic Throughput

Hi

All I am looking at is in the main Smartview Monitor window (NGXR65) under gateway status, Encrypted traffic Throughput Peak / Current etc

There is an option under gateway properties to show these fields.

I dont have any reporting licence if this is what you are referring to as I cannot find what you are referring to.
Reply With Quote
  #6 (permalink)  
Old 2008-08-20
Senior Member
 
Join Date: 2006-01-25
Posts: 920
Rep Power: 3
melipla has an average reputation (10+)
Default Re: Viewing VPN Encrypted or Traffic Throughput

Yeah I was referring to the "Traffic" section and using something like "Top Connections" for the gateway. I'm not exactly sure what you're looking at because there's more than one place...but AFAIK these numbers are all in bytes, not bits. Although I think one time someone reported seeing a negative number in there...
__________________
Its all in the documentation.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 17:55.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0