Login

NetworkTester

-
Layer 4-7 Test Solution

 
Download

Name: Firewall Performance Testing  pdf
Type: Application Note
Size
: 944 KB
Date: June 2003

 

If required, Download Acrobat Reader to view this file.
Get Adobe Acrobat Reader

Overview

This solution note describes the Agilent N4180A NetworkTester as a test and measurement solution to
determine the functional performance of network-based or host-based firewalls. By functional performance, we mean the firewall's ability to enforce an access control policy under realistic load and overload traffic conditions. Following accepts are covered in detail in this solution note:

  • Why firewall performance is important
  • How security and performance are interrelated
  • The dimensions of firewall performance
  • NetworkTester as a firewall performance test solution

Various classes of firewall technology exist ranging from simple static packet filtering to sophisticated proxy-based implementations. This solution note assumes that the reader is already familiar with these technologies and concentrates on describing how to use the NetworkTester to performance test the
firewall function.

In this solution note, we focus on performance testing the firewall function on networking devices. That is, we do not include the performance test of other security functions often included with firewall functionality on networking equipment such as Network Address Translation (NAT), Port Address Translation (PAT), Secure Virtual Private Network (VPN), Content, Mail and Virus Filtering, or
Intrusion Detection.

This is done for textual simplicity: once the performance of the firewall function is benchmarked, then performance tests of the firewall function in combination with the other security functions listed above can be conducted using the NetworkTester.