FP 2100 real performance numbers

[Wise_Man_1]

Hi Experts,

I have another question regarding the FP 2100 performance numbers, which I did not want to add to the original post on https://supportforums.cisco.com/t5/firewalling/new-firepower-2100-performance-numbers/m-p/3059018#M159584

to my surprise, I found these numbers at a customer site, provided by another system integrator who was offering a competitive solution,

	2110	2120	2130	2140
FTD 1024-byte HTTP IPS + AVC	2 Gbps	3 Gbps	4.75 Gbps	8.5 Gbps
FTD 450-byte HTTP IPS + AVC	850 Mbps	1.1 Gbps	1.7 Gbps	3.2Gbps
FTD 1024-byte HTTP AMP lookup+Sandboxing	1 Gbps	1.5 Gbps	2.4 Gbps	4.3 Gbps
FTD 1024-byte TCP S2S IPsec VPN AVC	600 Mbps	850 Mbps	1.3 Gbps	2.4 Gbps

the second line indicates what Cisco used to publish under seizing throughput, but the rest are (if they are correct) real disturbing.

so can someone from Cisco confirm or dispute these numbers?

Thanks

Wise

[Sam Smith · Accepted solution]

Hello Wise,

The numbers look reasonable to me, since September 2016 Cisco security have started using “marketing figures” by removing the “seizing” performance from the data sheet, if you look at the FP data sheets from August 2016 and before, you would see a seizing throughput row in the data sheet (using 450 byte HTTP traffic), so for example the FP4110 had a seizing throughput 4 Gbps IPS or AVC, while the current data sheet shows it as 10 Gbps IPS + AVC .

I really don’t care about the marketing figures, what I care about is when I propose a solution for my customer it fits their requirements, so I will always go with the seizing performance number, which is backed up by 3rd party testing.

You referenced the NSS labs testing in your previous post, the seizing throughput of the FP4110 is 4 Gbps IPS or AVC, according to old seizing guidelines, IPS + AVC is 30-45% less than the IPS or AVC number, which means that the FP 4110 has a IPS + AVC throughput of 2.2 – 2.8 Gbps, the test results in the latest NSS labs showed it as 2.45 Gbps

The same would apply to the FP2100, so use the seizing throughput (line 2) for IPS or AVC, then apply 30-45% degradation for IPS + AVC

Hope that helps

Best Regards

Sam

[Wise_Man_1]

Thanks Sam

but the number in line 2 is for IPS + AVC, would the same rule apply?

BR

Wise