LAS VEGAS --(Business Wire)-- May 3, 2006 -- NetDevices SG-4 Services Gateway Maintains Linear Performance When Firewall Functions Are Enabled; Enabling Firewall Halves Router Performance of Cisco 3845

NetDevices, Inc., a developer of services gateway products for enterprise branch networks, today announced that in an independent performance analysis by Miercom, the routing performance of its purpose-built SG-4 Services Gateway was not affected when the gateway's firewall capabilities were enabled. Performance remained completely linear even when the SG-4 processed a full range of firewall services and a high Access Control List (ACL) load. In contrast, side-by-side testing with the Cisco 3845 ISR revealed that the latter's router experienced a line-rate loss of as much as 50 percent or more, even under lighter loads, when the firewall was enabled. Miercom is an independent networking, security, and communications product testing organization.

For more information about the results of Miercom's testing of the SG-4 services gateway, visit NetDevices on the web at http://www.netd.com/resources/miercomtesting.

Key findings of the Miercom analysis include the following:

-- Multi-service performance scaling of the SG-4 was exemplary compared to Cisco 3845 ISR; the SG-4 performed packet forwarding, firewall, and Network Address Translation (NAT) functions with comparably less overhead under similar network load conditions.

-- The SG-4 to maintain linear performance as firewall service was added and tests were scaled up, due to the common packet classification enabled by OnePass(TM), which processes each packet only once for all services. Traditional multi-service routers increase processor load and latency by scanning each packet multiple times, once for each service.

-- The SG-4 maintained a high level of LAN throughput while simultaneously maintaining a fixed 45 Mbps VPN connection across a WAN.

-- The QoS module of the SG-4 was independently replaced with a different version during a live upgrade, with no outages and no need to reboot. NetDevices' ModuLive(TM) operating system, which provides a carrier-class, fully modular environment for services to run independently, was a key factor in maintaining uptime.

"The test results confirm that only a purpose-built unified system such as the SG-4 can provide enterprise-level performance across multiple services at the branch," said Eric Andrews, senior director of product management. "Legacy routers with extra services turned on can't scale to meet today's growing communications needs. When you compare these test results and our list price, which is 50 percent lower than the price of the 3845, it's clear that the SG-4 is a strong solution for the enterprise branch office."

Test Conditions

Performance of the SG-4 and the Cisco 3845 ISR were tested under the following conditions, which scaled to far beyond average Internet conditions:

-- Raw forwarding of 64B packets

-- 100 ACL for 64/512/1500B packets

-- 100 ACL+ NAT for 64/512/1500B packets

-- 100 ACL+ NAT + QoS Marking for 64/512/1500B packets

-- 100 ACL+ NAT + QoS Marking + DoS for 64/512/1500B packets

-- 1000 ACL + NAT for 64/512/1500B packets

-- Volume test with 5000 ACLs active and executed

"Miercom measured the change in network line rate as successive core services such as ACLs, NAT, and QoS were turned on, and over increasing packet sizes," said Robert J. Smithers, CEO of Miercom. "We found that under all conditions, and in comparison to the Cisco product, NetDevices' SG-4 maintained the same router throughput whether the firewall was off or on."

In the benchmark tests, the SG-4 outperformed the Cisco 3845 ISR on raw packet forwarding (no services activated) by more than 30 percent (64B packets), 892K to 600K packets per second. This trend continues, with the ISR showing less comparative throughput at 512B and 1500B packet sizes. The SG-4 exhibited a throughput rate change from 20 percent to 16 percent in the 64B test as the three significant services measured--100 ACLs, NAT, and QoS--were successively activated. In contrast, rate change of the Cisco 3845 ISR started at 9 percent throughput and went down to 3 percent.

In the 512B test cycle, the SG-4 maintained a rate at or above 90 percent with each service enabled (from 90 percent, to 96 percent, to 91 percent). Rates of the 3845 measured at less than 60 percent over the same sequence (56 percent, 27 percent, 18 percent). The NetDevices gateway continued to outperform the Cisco device at the higher packet size of 1500B; the SG-4 had 100 percent throughput as the number of active services increased, while the 3845 dropped to almost 52 percent of full throughput with all three services active.

About the SG-4

The SG-4 unifies all services required at the branch -- including perimeter and content security, robust data networking, and voice over IP (VoIP) support -- into a modular, remotely manageable, and always-available platform. The SG-4 meets the key IT requirements of all sizes of enterprise branch offices; it minimizes downtime, reduces the total cost of ownership, and improves overall service availability and manageability. The SG-4 Services Gateway has a modular four-slot chassis that is one rack-unit (RU) in height, yet supports a full range of services, including a 2Gbps stateful firewall; high volume IPSec VPN; intrusion detection and prevention (IDS/IPS); a SIP application-layer gateway with QoS for VoIP; high-performance routing with 900 Kpps forwarding; and a layer 2 Ethernet switch. Cards include a double-wide services engine with two GE ports, a four-port T1/E1 card, a four-port serial card, and an eight-port 10/100/1000 Ethernet switch.

NetDevices' SG-4 Services Gateway is priced at $7,995.

About NetDevices, Inc.

Founded in July 2003, NetDevices, Inc. provides next generation products that simplify the multiple technologies found in remote enterprise networks. NetDevices' services gateways unify multiple security and networking services into a single, highly available platform, while vastly improving manageability. Enterprises can significantly reduce their total cost of ownership while retaining flexibility, and increase the serviceability and reliability of critical branch services. NetDevices is headquartered in Sunnyvale, California. For more information on NetDevices, please visit www.NetD.com.

[ Back To TMCnet.com's Homepage ]

Discussions: