How can I measure throughput of PIX firewall ?

Posted on 2007-07-27
Medium Priority
Last Modified: 2013-12-10
Hi experts,
I have confusing between performance and throughput concepts.
My knowledge is that the performance indicates to CPU speed (unit is HZ), and throughput reflects the network speed (unit is bps).
Could you clarify the meaning of them exactly ? provide references ?
And what is the commands that retrieve the performance and throughput of PIX firewall ?

Thanks ,,,
Question by:Mesfer

Accepted Solution

HalldorG earned 336 total points
ID: 19587488
Well for one performance can be given in values of packets per second as the packets can be of variables sizes the throughput is bits per seconds.

A good program to get decide maximum throughput is iperf it can be a server or a client against another iperf server.  So to get reading you place the iperf programs on each site of the pix and run trough a test.

In the gui mode of the pix is also some monitoring tools.

LVL 32

Assisted Solution

rsivanandan earned 332 total points
ID: 19587744
Performance is defined in terms on how the device's *health* is concerned

Throughput is defined in terms on how much traffic (in bytes) are going in and out of the box.

They are inversly proportional, For high traffic to go through the PIX would have to use high resources as well.

For performance, you could use 'show cpu' and 'show cpu memory' on the PIX.

For throughput, you could just use 'show int' and see how much traffic is going through the interface.

LVL 79

Assisted Solution

lrmoore earned 332 total points
ID: 19588006
Throughput is but one measure of performance. Performance depends on CPU utilization, memory utilization, rule sets, firewall policies, encryption if used, etc. All of those affect overall througput.
The PDM and/or ASDM web gui has some performance and throughput viewing/charting capability on its own. ASDM with PIX OS 7.x has some pretty good health indicators right on the home page. PIX 8.0 with ASDM 6.x takes it to a whole new level.
You can use most any snmp program like mrtg, prtg, solarwinds to keep track of traffic going in/out of the interface to chart throughput.

LVL 79

Expert Comment

ID: 19993818
The question was answered.
Suggest a 3-way split


Expert Comment

ID: 20031732
Forced accept.

EE Admin

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When speed and performance are vital to revenue, companies must have complete confidence in their cloud environment.
On Feb. 28, Amazon’s Simple Storage Service (S3) went down after an employee issued the wrong command during a debugging exercise. Among those affected were big names like Netflix, Spotify and Expedia.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
Suggested Courses

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question