What are the Guidelines for Improving FireWall-1 Performance?
Management Module Installing a Security Policy on a remote FireWall Module can often be speeded up by listing both machines in the hosts (Unix) or lmosts (Windows) files. FireWall Module FireWall-1 performance depends on the hardware, the Security Policy, and the characteristics of the network traffic. While the Firewall is inspecting packets, the time of handling a packet spends in the kernel increases. The conclusion is that Firewall-1 has a greater impact on latency (connection latency or transaction latency) and less on the bandwidth. Benchmarks have shown that, while there is usually little throughput degradation, the latency may well be significantly degraded in some cases. This degradation can as a rule, be successfully addressed. Acquiring faster hardware is always helpful.
