Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have 100Mbs down internet and I'm trying to find a firewall that will not slash the speed down to much. I've tried with a Sonicwall Tz210 and a year old cisco ASA 5 series. They both cut the speed down to 50Mbs and 30Mbs respectively. Does anyone have any experience with new firewalls capable of delivering better throughput ?

share|improve this question

closed as not constructive by TomTom, Scott Pack, Michael Hampton, Iain Dec 24 '12 at 21:56

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

Did you check to make sure bandwidth management was disabled on the Sonicwall? Also if you're running filtering/AV it will have an impact on speed. – cole Dec 24 '12 at 15:48
Voring to close - that is a shopping question, off topic per FAQ. – TomTom Dec 24 '12 at 16:11
up vote 1 down vote accepted

If you want to get brutal: Mikrotik CCR (CLoud COre Router). Has 2 cores per port, dedicated. Not expensive. The speed you get from that will make the "100mbit" a sad joke. You can easily firewall 6-8 gigabit with complex rules.

share|improve this answer
Do you know when will the Mikrotik be available ? ISP has it as pre-order ? – bumble_bee_tuna Dec 24 '12 at 17:27
Soon. They wait for RouterOS v6 to be finished (in RC6 state) for that one. It is an impressive item, though. FOr 100mbit an 1100AH2 should be enough. – TomTom Dec 24 '12 at 18:08

The Tz210 should work at 100Mbps according to Tz210 specs But as noted on that page and by @Cole, enabling some options will reduce throughput The Tz210 Stateful Throughput is rated at 200Mbps but UTM performance is around 50Mbps.

You will likley need something with more processing power to get your full 100Mbps and naturally there is a cost

share|improve this answer
Yeah I fooled around with the bandwidth management didn't make a noticeable difference. – bumble_bee_tuna Dec 24 '12 at 17:31

Not the answer you're looking for? Browse other questions tagged or ask your own question.