We achieved 100% efficacy for exploits and evasions. Malware safety as much as 99.5% (misses lowered from 34 to 19). Efficiency remains to be wonderful!
In a panorama the place threats evolve at an unprecedented tempo, proactive and high-performance safety is non-negotiable. Cisco Safe Firewall 1220, leveraging the facility of its Snort3 engine, lately underwent rigorous testing, adhering to NetSecOPEN requirements, demonstrating its distinctive capabilities in each efficiency and safety efficacy. This complete analysis validates our dedication to delivering lightning-fast velocity mixed with impeccable safety, engineered to maintain even probably the most refined threats on the sidelines. This report displays the rigor given to the 1220, stress-testing to its limits with reasonable hundreds and complex assault simulations, offering a transparent indication of its industry-leading throughput and safety efficacy with out compromising the velocity your corporation calls for.
What was examined, and why does it matter?
To actually perceive the 1220’s capabilities, it is very important study the depth of its analysis. The testing was performed by an authorized NetSecOPEN check lab, making certain adherence to stringent {industry} requirements for community safety efficiency. The System Below Check (DUT) was a Safe Firewall examined utilizing the most recent software program model, vulnerability database, and Snort replace. The analysis centered on:
- Numerous Site visitors Mixes: The check replicated real-world web site visitors, simulating complicated enterprise situations with particular healthcare and schooling site visitors profiles.
- Software-Particular Senarios: Assessing efficiency throughout numerous purposes, from customary net (HTTP/HTTPS) to enterprise purposes.
- Complete Menace Blocking: Proactively testing the firewall’s potential to dam private and non-private CVEs, refined malware, and evasive assault strategies.
We exist in an period the place cyberattacks are more and more refined and volumetric, your group’s safety infrastructure should do greater than merely react — it must proactively defend at scale, with out compromising the velocity important for vital enterprise operations. Impartial testing gives empirical, vital validation wanted to make sure that your group will get:
- Unbiased Validation: Confirms that our merchandise carry out as engineered underneath situations reflecting your precise community setting.
- Actual-World Efficacy: In contrast to theoretical benchmarks, these assessments leverage site visitors patterns and hundreds your community is prone to expertise, offering confidence within the firewall’s real-world effectiveness.
- Belief and Transparency: The detailed methodology and clear reporting construct belief, empowering you to make knowledgeable selections about your safety investments.
Uncompromised efficiency
A vital problem in trendy community safety is the deep inspection of rising volumes of site visitors, particularly encrypted site visitors, with out degrading efficiency. Safe Firewall is engineered to sort out this head-on, delivering distinctive safety efficacy and community efficiency. Via testing, we validated particulars of its capabilities:
Optimized Throughput for Deep Inspection — The 1220 sustained important site visitors volumes even underneath full inspection:
- Common Net Pages (HTTP) Inspected Throughput: Achieved as much as 5.12 Gbps (with various packet sizes), demonstrating its capability for high-speed net site visitors evaluation, even when Snort used all the CPU.
- Safe Net Pages (HTTPS) Inspected Throughput: Delivered as much as 2.55 Gbps (with various packet sizes), proving its potential to examine encrypted site visitors at scale even when CPU was at capability.
Safety Below Load — Maintained between 0.95 and 1.20 Gbps for real-world site visitors simulations, whereas proactively blocking 100% of CVEs.
Proactive Menace Safety — The 1220 demonstrated its strong protection mechanisms:
- 100% block price for each private and non-private CVEs, and evasions, indicating its potential to neutralize identified and rising vulnerabilities.
- A powerful 99.5% block price for malware, showcasing its superior risk detection capabilities.
Extremely-Low Latency for Seamless Expertise — The system responds in a short time, so customers hardly discover any delay. Persistently low common transaction latencies guarantee minimal impression on person expertise:
- Loading Time for Common Net Pages (HTTP): On common, it takes as little as 0.556 milliseconds for the primary a part of an online web page to start out loading when examined with 1,000 requests per second.
- Loading Time for Safe Net Pages (HTTPS): On common, it takes as little as 2.159 milliseconds for the primary a part of a safe net web page to start out loading when examined with 16,000 requests per second.
Excessive Connection and Transaction Charges — The 1220 is constructed to deal with high-volume community actions:
- TCP/HTTP Connections Per Second: Reached 21,344 new connections per second when examined with 1,000 customers.
- Concurrent Connection Capability: Supported almost 300,000 lively HTTP connections and over 78,000 lively HTTPS connections on the similar time, demonstrating spectacular scalability.
Cisco Safe Firewall 1220 doesn’t simply block threats; it does so with industry-leading velocity and effectivity, making certain your community stays safe and your operations unhindered. The NetSecOPEN report validates its efficiency and efficacy for probably the most demanding safety challenges.
Discover the small print
Overview the entire NetSecOPEN report to find how the Cisco Safe Firewall 1220 delivers strong safety in your group with out sacrificing efficiency.  See how the outcomes stack up in our infographic.
Attempt it your self
Take part within the Cisco Safe Firewall Check Drive, an instructor-led, 4-hour safety course the place you’ll get hands-on expertise with Cisco firewalls and study concerning the newest attacker strategies which can be shaping at present’s community safety necessities.
We’d love to listen to what you assume! Ask a query and keep linked with Cisco Safety on social media.
Cisco Safety Social Media
