Firebox Virtual - Perfomance

Bek

Regarding the performance of the XLarge virtual machine, there are still some doubts and a number of questions:

1. It's stated that the support is for 1500 users — in our architecture, there are no users, only white subnets associated with the customer. Will this count as a user? Is the limitation hypothetically determined (based on average utilization from synthetic tests) or strictly defined by the licensing terms?

2. What is the maximum traffic volume that one virtual machine can handle?

3. What are the hardware requirements for the hypervisor, specifically regarding optical network cards?

james.carson

Hi @Bek

The user count limit is based on how many average users a customer would place behind a firewall. It's an estimate based on the type of traffic we expect from a user with a workstation, and possibly a phone. If your environment isn't user-based, the throughput numbers would likely be a better metric to use for that firewall.

There isn't a maximum traffic value for the XL FireboxV - it is purely limited by how much data the hypervisor it is running on will allow it to process.

Datasheet - https://www.watchguard.com/wgrd-resource-center/docs/watchguard-fireboxv

There aren't any specific requirements for network cards on the hypervisor aside from the Hypervisor supporting them. There may be specific settings that are recommended based on what hypervisor you choose. I would suggest looking at the deployment guide for VMWare, HyperV, and KVM here:

https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/firebox_v/fbv_help_intro.html

Robert_Vilhelmsen

@Bek

We are running a medium on VMWare with 10gbit speed which is performing very well. Just be aware there is a HA cluster issue causing the vrrp ip address to be active on both the active and passicve unit which causes HA not working.

/Robert