A press announcement yesterday was released from Intel and Check Point. Using the new Xeon “Woodcrest” CPU, SPlat is able to produce throughput numbers of 10Gbps. This is quite impressive. It also scales to 3.2 Gbps throughput for VPN using AES. No special code is required to support this system. This is a basic VPN-1 Power build using SecureXL to fully utilize the multi-core technology of this new CPU.
Other benefits:
- 2 Million packets per second for streaming media
- Future-Proofs your security environment for new applications and security threats
- Multi-Gig performance with SmartDefense enabled
No special hardware is required, just an “open server” which will include HP, Dell and IBM.
Comparing the cost per Gbps is also very impressive. Take a look at the following configurations based on list price:
|
Product
|
Gbps
|
Price
|
Price/Gbps
|
|
Check Point VPN-1 Power ($12,995)
Open Server with 2 Dual-core Xeon Woodcrest Processors ($5,000-$7,000)
|
10 Gbps
|
$19,995
|
$1,999
|
|
Cisco Pix 535
|
1.7 Gbps
|
$27,995
|
$16,468
|
|
Cisco ASA 5550
|
1.2 Gbps
|
$19,995
|
$16,662
|
|
Juniper SSG550
|
1+ Gbps
|
$13,500
|
$13,500
|
Five times faster at 1/7th the price of anything in this category. You only need to spend about $5,000 to $7,000 on an Intel platform for this performance. Check Point continues to demonstrate that the security is in the code (not the ASIC), and that the code is optimized to keep pace with hardware improvements.
WTF is SecureXL? What does it do?
Performance Pack is a software acceleration product installed as an add-on to VPN-1/FireWall-1. Performance Pack significantly enhances and improves performance of VPN-1/FireWall-1. It provides “wirespeed ” performance for functions like:
access control
encryption
NAT
accounting and connection/session rate
general security checks
Do you need it? For high performance situations you should be considering it as an add-on. Most small to mid-size environments will not require it.
Pingback:fireverse.org » Blog Archive » An Open Letter to Richard Stiennon