Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
Key Performance Factors in SSL Inspection and Antivirus Scanning for FortiGate Firewalls
University West, Department of Engineering Science.
University West, Department of Engineering Science.
2024 (English)Independent thesis Basic level (degree of Bachelor), 10 credits / 15 HE creditsStudent thesis
Abstract [en]

This thesis investigates the performance of Fortinet's Next-Generation Firewalls (NGFWs), specifically the FortiGate 40F and 1500D models, under varying traffic conditions and security requirements. Given the increasing reliance on SSL inspection for network security and its potential impact on performance, this study aims to provide guidance for organizations selecting appropriate firewall solutions. To simulate real-world network conditions, this study utilizes a designed testbed to evaluate the performance of FortiGate firewalls in handling HTTPS traffic with and without SSL inspection and antivirus scanning enabled. This approach provides practical insights into the operational impact of these security features.Results reveal that while 1500D consistently outperforms the 40F firewall, both models maintain a consistent virus detection rate. However, CPU and memory utilization remain stable across both models even under heavy loads, suggesting bottlenecks within specialized security processors. This thesis demonstrates the crucial role of hardware accelerators, par-ticularly Content Processors (CPs), in determining NGFW performance. With its more ad-vanced CPs, the FortiGate 1500D demonstrates superior performance in handling high traffic volumes and complex security tasks compared to the 40F model, underscoring the importance of selecting firewall models based on specific network and security needs. These findings provide guidance for organizations seeking to balance protection against malicious traffic with optimal network efficiency.

Place, publisher, year, edition, pages
2024. , p. 34
Keywords [en]
FortiGate 40F, FortiGate 1500D, SSL Inspection, Antivirus, Security Processor
National Category
Computer Systems
Identifiers
URN: urn:nbn:se:hv:diva-22011Local ID: EXD600OAI: oai:DiVA.org:hv-22011DiVA, id: diva2:1877112
Subject / course
Computer engineering
Educational program
Master in Cybersecurity
Supervisors
Examiners
Available from: 2024-07-23 Created: 2024-06-25 Last updated: 2024-07-23Bibliographically approved

Open Access in DiVA

No full text in DiVA

By organisation
Department of Engineering Science
Computer Systems

Search outside of DiVA

GoogleGoogle Scholar

urn-nbn

Altmetric score

urn-nbn
Total: 242 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf