The following table describes the supported NS3500 Sensor capacity:
Maximum Type | NS3500 |
|---|---|
Aggregate HTTP Performance | 750 Mbps |
Max Throughput with test equipment sending UDP packet size of 1512 Bytes | up to 1 Gbps |
Concurrent Connections | 1,00,000 |
Connections established per second | 25,000 |
Latency (Average UDP per packet Latency) | <100 µs |
SSL Flow Count | NA |
Number of SSL certificates that can be imported into the Sensor | NA |
Throughput with Inbound SSL Decryption (based on 10% SSL traffic) | NA |
Quarantine rules per Sensor- IPv4 | 7,999 |
Quarantine rules per Sensor- IPv6 | 500 |
Quarantine Zones per Sensor | 50 |
Quarantine Zone ACLs per Sensor | 1,000 |
Virtual Interfaces (VIDS) per Sensor (Number of Virtual IPS Systems) | 32 |
VLAN / CIDR Blocks per Sensor | 64 |
VLAN / CIDR Blocks per Interface | 64 |
Customized attacks See the note below on how the number of customized attacks is affected. | 100,000 |
Ignore rules | 65,536 |
Number of attacks with ignore rules | 40,000 |
DoS Profiles | 128 |
SYN cookie rate (64 ‑ byte packets per second) | 400,000 |
Effective (Firewall) access rules | 1,000 |
Firewall rule objects | 7,000 |
Firewall DNS rule objects | 500 |
Firewall rule object groups | 100 |
Application on Custom Port rule objects | 150 |
Firewall user-based rule objects | 500 |
Firewall user groups in access rules | 10,000 |
Number of exclusion list entries permitted for IP Reputation | 32 |
Maximum host entries supported for Connection Limiting policies | 128,000 |
Maximum file size during packet capture | 40 MB |
Passive device profile limits | 10,000 |
Advanced Malware - Maximum simultaneous file scan capacity when the file is saved in the Sensor See the note below for more information. | 16 |
Advanced Malware - Maximum simultaneous file scan capacity without saving files in the Sensor See the note below for more information. | 255 |
New HTTP connections per second(using 1 GET with 5000 HTTP response) | 15,000 |