Sensor performance with Layer 7 Data Collection

Turning on the Layer 7 Data Collection feature reduces Sensor performance.

HTTP Response Scanning setting
Proportion of HTTP traffic to other protocols
Relative number of HTTP requests and responses in each direction
Size of a response page sent to the client by the sites or applications that are typically accessed

The following table provides the performance details in a test environment.

The test environment used 5 HTTP 1.1 get page requests per TCP connection with a 10 K response, each sent in one direction.
When Advanced Traffic Inspection is enabled, in a deployment with 90 percent of traffic without evasions and 10 percent of traffic with evasions, the overall Sensor throughput would further drop by an additional five percent approximately. For example, if you get 1 Gbps throughput with Layer 7 Data Collection enabled, you would see 950 Mbps if Advanced Traffic Inspection is also enabled.

NS-series Sensor performance with Layer 7 Data Collection

Note
Since the default value of L7 data collection is set to 20% of all traffic, the number of flows decreases by approximately 15%.

NS9600 performance details with respect to Layer 7 Data Collection

Sensor Model	Layer 7 Data Collection setting	HTTP Response Scanning setting	Observed throughput
NS9500 stack (2-node) - 120 Gbps throughput	Disabled	Disabled	120 Gbps
	Disabled	Enabled for outbound direction	120 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	120 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	120 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	120 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	120 Gbps
NS9600 standalone - 60 Gbps throughput	Disabled	Disabled	60 Gbps
	Disabled	Enabled for outbound direction	60 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	60 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	60 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	60 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	60 Gbps
NS9600 standalone - 40 Gbps throughput	Disabled	Disabled	40 Gbps
	Disabled	Enabled for outbound direction	40 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	40 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	40 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	40 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	40 Gbps
NS9600 standalone - 20 Gbps throughput	Disabled	Disabled	20 Gbps
	Disabled	Enabled for outbound direction	20 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	20 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	20 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	20 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	20 Gbps

NS9500 performance details with respect to Layer 7 Data Collection

Sensor Model	Layer 7 Data Collection setting	HTTP Response Scanning setting	Observed throughput
NS9500 stack - 100 Gbps throughput	Disabled	Disabled	100 Gbps
	Disabled	Enabled for outbound direction	100 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	100 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	100 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	100 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	100 Gbps
NS9500 stack - 60 Gbps throughput	Disabled	Disabled	60 Gbps
	Disabled	Enabled for outbound direction	60 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	60 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	60 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	60 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	60 Gbps
NS9500 stack - 40 Gbps throughput	Disabled	Disabled	40 Gbps
	Disabled	Enabled for outbound direction	40 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	40 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	40 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	40 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	40 Gbps
NS9500 standalone - 30 Gbps throughput	Disabled	Disabled	30 Gbps
	Disabled	Enabled for outbound direction	30 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	30 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	30 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	30 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	30 Gbps
NS9500 standalone - 20 Gbps throughput	Disabled	Disabled	20 Gbps
	Disabled	Enabled for outbound direction	20 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	20 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	20 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	20 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	20 Gbps
NS9500 standalone - 10 Gbps throughput	Disabled	Disabled	10 Gbps
	Disabled	Enabled for outbound direction	10 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	10 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	10 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	10 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	10 Gbps

NS9x00 performance details with respect to Layer 7 Data Collection

Sensor Model	Layer 7 Data Collection setting	HTTP Response Scanning setting	Observed throughput
NS9300	Disabled	Disabled	40 Gbps
	Disabled	Enabled for outbound direction	40 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	40 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	40 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	40 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	40 Gbps
NS9200	Disabled	Disabled	20 Gbps
	Disabled	Enabled for outbound direction	20 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	20 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	20 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	20 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	20 Gbps
NS9100	Disabled	Disabled	10 Gbps
	Disabled	Enabled for outbound direction	10 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	10 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	10 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	10 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	10 Gbps

NS7600 performance details with respect to Layer 7 Data Collection

Sensor Model	Layer 7 Data Collection setting	HTTP Response Scanning setting	Observed throughput
NS7600 - 20 Gbps throughput	Disabled	Disabled	20 Gbps
	Disabled	Enabled for outbound direction	20 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	20 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	20 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	20 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	20 Gbps
NS7600 - 15 Gbps throughput	Disabled	Disabled	15 Gbps
	Disabled	Enabled for outbound direction	15 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	15 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	15 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	15 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	15 Gbps
NS7600 - 10 Gbps throughput	Disabled	Disabled	10 Gbps
	Disabled	Enabled for outbound direction	10 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	10 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	10 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	10 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	10 Gbps
NS7600 - 5 Gbps throughput	Disabled	Disabled	5 Gbps
	Disabled	Enabled for outbound direction	5 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	5 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	5 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	5 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	5 Gbps

NS7500 performance details with respect to Layer 7 Data Collection

Sensor Model	Layer 7 Data Collection setting	HTTP Response Scanning setting	Observed throughput
NS7500 - 7.5 Gbps throughput	Disabled	Disabled	7.5 Gbps
	Disabled	Enabled for outbound direction	7.5 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	7.5 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	7.5 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	7.5 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	7.5 Gbps
NS7500 - 5 Gbps throughput	Disabled	Disabled	5 Gbps
	Disabled	Enabled for outbound direction	5 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	5 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	5 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	5 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	5 Gbps
NS7500 - 3 Gbps throughput	Disabled	Disabled	3 Gbps
	Disabled	Enabled for outbound direction	3 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	3 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	3 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	3 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	3 Gbps

NS7x50 performance details with respect to Layer 7 Data Collection

Sensor Model	Layer 7 Data Collection setting	HTTP Response Scanning setting	Observed throughput
NS7350	Disabled	Disabled	5 Gbps
	Disabled	Enabled for outbound direction	5 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	5 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	5 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	5 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	5 Gbps
NS7250	Disabled	Disabled	3 Gbps
	Disabled	Enabled for outbound direction	3 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	3 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	3 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	3 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	3 Gbps
NS7150	Disabled	Disabled	1.5 Gbps
	Disabled	Enabled for outbound direction	1.5 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	1.5 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	1.5 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	1.5 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	1.5 Gbps

NS7x00 performance details with respect to Layer 7 Data Collection

Sensor Model	Layer 7 Data Collection setting	HTTP Response Scanning setting	Observed throughput
NS7300	Disabled	Disabled	5 Gbps
	Disabled	Enabled for outbound direction	5 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	5 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	5 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	5 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	5 Gbps
NS7200	Disabled	Disabled	3 Gbps
	Disabled	Enabled for outbound direction	3 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	3 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	3 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	3 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	3 Gbps
NS7100	Disabled	Disabled	1.5 Gbps
	Disabled	Enabled for outbound direction	1.5 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	1.5 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	1.5 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	1.5 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	1.5 Gbps

NS5x00 performance details with respect to Layer 7 Data Collection

Sensor Model	Layer 7 Data Collection setting	HTTP Response Scanning setting	Observed throughput
NS5200	Disabled	Disabled	1 Gbps
	Disabled	Enabled for outbound direction	1 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	1 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	1 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	1 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	1 Gbps
NS5100	Disabled	Disabled	600 Mbps
	Disabled	Enabled for outbound direction	600 Mbps
	Percentage of flows that capture L7 data: 5	Disabled	600 Mbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	600 Mbps
	Percentage of flows that capture L7 data: 100	Disabled	600 Mbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	600 Mbps

NS3600 performance details with respect to Layer 7 Data Collection

Sensor Model	Layer 7 Data Collection setting	HTTP Response Scanning setting	Observed throughput
NS3600 - 5 Gbps throughput	Disabled	Disabled	5 Gbps
	Disabled	Enabled for outbound direction	5 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	5 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	5 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	5 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	5 Gbps
NS3600 - 3 Gbps throughput	Disabled	Disabled	3 Gbps
	Disabled	Enabled for outbound direction	3 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	3 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	3 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	3 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	3 Gbps
NS3600 - 1 Gbps throughput	Disabled	Disabled	1 Gbps
	Disabled	Enabled for outbound direction	1 Gbps
	Percentage of flows that capture L7 data: 5	Disabled	1 Gbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	1 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	1 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	1 Gbps

NS3500 performance details with respect to Layer 7 Data Collection

Sensor Model	Layer 7 Data Collection setting	HTTP Response Scanning setting	Observed throughput
NS3500	Disabled	Disabled	750 Mbps
	Disabled	Enabled for outbound direction	750 Mbps
	Percentage of flows that capture L7 data: 5	Disabled	750 Mbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	750 Mbps
	Percentage of flows that capture L7 data: 100	Disabled	750 Mbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	750 Mbps

NS3x00 performance details with respect to Layer 7 Data Collection

Sensor Model	Layer 7 Data Collection setting	HTTP Response Scanning setting	Observed throughput
NS3200/NS3100	Disabled	Disabled	750 Mbps
	Disabled	Enabled for outbound direction	750 Mbps
	Percentage of flows that capture L7 data: 5	Disabled	750 Mbps
	Percentage of flows that capture L7 data: 5	Enabled for outbound direction	750 Mbps
	Percentage of flows that capture L7 data: 100	Disabled	750 Mbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	750 Mbps

Virtual IPS Sensor performance with Layer 7 Data Collection

Sensor performance details with respect to Layer 7 Data Collection

Sensor model (on ESXi/KVM)	Layer 7 Data Collection setting	HTTP Response Scanning setting	Observed throughput
IPS-VM600	Disabled	Disabled	1 Gbps
	Disabled	Enabled for outbound direction	1 Gbps
	Percentage of flows that capture L7 data: 20	Disabled	1 Gbps
	Percentage of flows that capture L7 data: 20	Enabled for outbound direction	1 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	1 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	1 Gbps
IPS-VM5000	Disabled	Disabled	5 Gbps
	Disabled	Enabled for outbound direction	5 Gbps
	Percentage of flows that capture L7 data: 100	Disabled	5 Gbps
	Percentage of flows that capture L7 data: 100	Enabled for outbound direction	5 Gbps
	Percentage of flows that capture L7 data: 20	Disabled	5 Gbps
	Percentage of flows that capture L7 data: 20	Enabled for outbound direction	5 Gbps