Is the Netscreen 5GT enough firewall for this...

Archived from groups: comp.security.firewalls (More info?)

Hi,

Blaker <anonymous@discussions.com> wrote:
> It the Netscreen 5GT enough firewall to handle a production webserver with
> 20-50 sites, each receiving light (< 1000 page views/day)?

Hmm. The peak, not the average laod is interesting.


> Netscreen support thinks it might be a Session limit problem, or possibly a
> User limit problem. What exactly are Sessions and Users?

Sessions are concurrent TCP-Sessions (UDP-Session, args, there is no
such thing as a UDP-session )

> Does each user
> represent one IP or mac-address on the Trust side,

Yes. Entry in ARP-Table.

> or does it represent a
> concurrent user on the Untrust side?

No.

> My subdomain

Subnet

> is a /28, which is 15
> hosts - does this alone blow the 10 User limit?

Not, if you have less than 10 IP-Addresses active.


> And, on Sessions - does one page view = 1 session, or do you get a session
> for each element of the page?

Each element triggers a http request, which might trigger a single
TCP-session.

> And, how long do these items remain in the
> Netscreen cache, and what cause them to be released/reused?

The end of the session?

Greetings,
Jens