topic sizing firewall in Network Security

sizing firewall

abdurezakabdela — Wed, 23 Mar 2022 09:23:48 GMT

i have 500 internal user, 1000 vpn external user and have 100 IOT device. so how to calculate connection per second and concurrent session? please help me ?

Re: sizing firewall

Rob Ingram — Wed, 23 Mar 2022 09:28:45 GMT

@abdurezakabdela the best place to start is check the specs in the datasheets.

As you have 1000 VPN users, assuming that is concurrent, your minimum spec Cisco Secure Firewall (Firepower) device would be the 2110, which supports up to 1,500 maximum VPN peers. The smaller 1000 series does not support upto 1000 concurrent VPN peers.

https://www.cisco.com/c/en/us/products/collateral/security/firepower-2100-series/datasheet-c78-742473.html

What speed internet connection do you have? Check the specs in the datasheet above, the 2110 will give you 2.6Gbps theoretical throughput for Firewall + Application Visibility Control + Intrusion Prevention.

Re: sizing firewall

abdurezakabdela — Wed, 23 Mar 2022 09:34:52 GMT

speed internet connection i have is 120mbps

Re: sizing firewall

balaji.bandi — Wed, 23 Mar 2022 10:28:06 GMT

Firepower 21XX can do the job, interms of bandwidth you have 120MB (may be less for the requirement) you may struggle kind of userbase. or you need make some QoS config here.