Firewall Analyzer

防火牆日誌分析軟件

Firewall Analyzer Download  Get Quote

Firewall Analyzer System Requirements

Hardware Requirements

The minimum hardware requirements for installing and working with Firewall Analyzer are given below.

  • 1GHz Pentium 4 processor or equivalent
  • 512 MB of RAM*
  • 1 GB of disk space*
  • Monitor that supports 1024x768 resolution

*The following table recommends the disk space and RAM size requirements of the system where Firewall Analyzer is installed. The disk space and RAM size requirements depends on the number of devices sending log information to Firewall Analyzer, the number of firewall log records received per second or the firewall log data received per day by Firewall Analyzer.

Log Records Rate or Volume RAM Size Hard Disk Space Requirement
Per Month to Archive Logs
50/sec or 1.5 GB/day 512 MB 30 GB
100/sec or 3 GB/day 1 GB 90 GB
300/sec or 9 GB/day 2 GB 270 GB
500/sec or 15 GB/day 2 GB 450 GB
1000/sec or 30 GB/day 3 GB 900 GB
2000/sec or 60 GB/day 4 GB 1.8 TB

CPU Requirements

  • Dedicated machine has to be allocated to process more than 200 logs per second.
  • Dual core processors are needed to process more than 500 logs per second.
  • Quadra core processors are needed to process more than 1000 logs second.

RAM Requirements

  • Number of firewalls handled by the Firewall Analyzer will increase the requirement of the above RAM values. So it is better to have RAM value higher than the suggested value in case of having more than 5 firewalls.

Separate Installation

  • Firewall Analyzer server and MySQL database can be installed in separate machines, in case of higher log rate with low-end CPU machines.

Hard Disk Requirements for more months

  • The above Hard Disk space requirement projected is for one month. If you need to archive the logs for more number of months, multiply the above requirements with the number of months based on your requirement.

Note: The Log Records Per Second is the total log records received per second by Firewall Analyzer from all the configured devices.

MySql Performance Improvement Parameters

For better performance, we recommend replacing the existing MySQL parameters mentioned in startDB.bat/sh, available under <FirewallAnalyzerHome>\bin directory, with the following MySQL parameters changes for the corresponding RAM Size. Apart from MySQL parameter changes, you can also tune MySQL table sizes based on RAM availabililty to improve MySQL performance.

RAM Size MySQL Parameters For
Windows Installation
MySQL Parameters For
Linux Installation
512 MB Default configuration as given in startDB.bat Default configuration as given in startDB.sh
1 GB --innodb_buffer_pool_size=300M
--key-buffer-size=150M
--max_heap_table_size=150M
--tmp_table_size=100M
--table-cache=512
--innodb_buffer_pool_size=300M
--key_buffer_size=150M
--max_heap_table_size=150M
--tmp_table_size=100M
--table-cache=512
2 GB --innodb_buffer_pool_size=900M
--key-buffer-size=600M
--max_heap_table_size=350M
--tmp_table_size=100M
--table-cache=512
--innodb_buffer_pool_size=900M
--key_buffer_size=600M
--max_heap_table_size=350M
--tmp_table_size=100M
--table-cache=512
3 GB --innodb_buffer_pool_size=900M
--key-buffer-size=600M
--max_heap_table_size=350M
--tmp_table_size=100M
--table-cache=512
--innodb_buffer_pool_size=1400M
--key_buffer_size=1000M
--max_heap_table_size=350M
--tmp_table_size=100M
--table-cache=512
4 GB --innodb_buffer_pool_size=900M
--key-buffer-size=600M
--max_heap_table_size=350M
--tmp_table_size=100M
--table-cache=512
--innodb_buffer_pool_size=1800M
--key_buffer_size=1200M
--max_heap_table_size=350M
--tmp_table_size=100M
--table-cache=512

 

How to tune MySQL table sizes based on RAM availabililty?

In addition to MySQL parameter changes, one needs to change the "BATCH_SIZE" used for moving the data from and to report tables. To configure the BATCH_SIZE, follow the below mentioned steps,

1. Login to FWA Web-Client.
2. Type in the following URL, "http://<Name/IP of m/c in which FWA is installed>:8500/fw/dmConfig.do". 8500 is default web-server port.
3. This will show the current "BATCH_SIZE" configured by default.
4. Based on the RAM available in the machine, please configure the parameters and click on "Save Changes" button.

RAM Size Batch Size Recommended
1 GB Raw Table = 20000
Hourly Table = 30000
2 GB Raw Table = 30000
Hourly Table = 40000
Above 2 GB Raw Table = 50000
Hourly Table = 40000

 

Supported Operating Systems

Firewall Analyzer can be installed and run on the following operating systems and versions:

  • Windows™ NT, 2000, XP & Vista and Windows™ 2003 & 2008 Servers
  • Linux - RedHat 8.0/9.0, Mandrake/Mandriva, SuSE, Fedora, CentOS

Note: If Firewall Analyzer is installed in SuSE Linux, then ensure that in the mysql-ds.xml file, present under <FirewallAnalyzer_Home>/server/default/deploy you replace localhost mentioned in the following line : <connection-url>jdbc:mysql://localhost:33336/firewall</connection-url> with the corresponding IP Address or DNS resolvable name of the current system where Firewall Analyzer is installed.

Supported Web Browsers

  • Internet Explorer 5.5 and later
  • Netscape 7.0 and later
  • Mozilla 1.5 and later
  • Firefox 1.0 and later
Firewall Analyzer Download
合作夥伴
Fortinet Global Alliance Partner - Technology Partner Juniper Networks J Partner Check Point OPSEC Partner