Pojawil sie soft FWSM 4.x

same linki
Wiadomość
Autor
Seba
CCIE/CCDE Site Admin
CCIE/CCDE Site Admin
Posty: 6223
Rejestracja: 15 lip 2004, 20:35
Lokalizacja: Warsaw, PL

Pojawil sie soft FWSM 4.x

#1

#1 Post autor: Seba »

A dostalem cos takiego dzisiaj:
Version 4 of the FWSM software is out:
http://www.cisco.com/en/US/docs/securit ... mrn40.html
The most obvious additions are in using the power of the supervisor to
accelerate flows in hardware. There are two implementations of this:

Trusted Flow Acceleration - the FWSM programs a "cut-through" on the
PFC so that trusted flows get forwarded in hardware without hitting the
FWSM after the first packet. This is for a Sup720 or Sup32 in the same
chassis. Targeted performance is 20 - 50+ Gbps Aggregate Throughput and
10+ Gbps Throughput per Flow, but your mileage may vary. Nothing is
free, and this takes entries away from the NetFlow TCAM.

PISA Integration - a Sup32-PISA can tag packets, so that a FWSM
elsewhere in the network can detect them. For example, an edge PISA can
do deep packet inspection of the data and determine that it is safe
based on the application layer; the packet is then tagged so that when
it arrives at the Datacentre the FWSM does not inspect it again.

Note that both features rely on new versions of supervisor code that are
currently expected in an Autumn release.
"Two things are infinite: the universe and human stupidity; and I'm not sure about the universe."
A. Einstein

Awatar użytkownika
gaph
CCIE / Instruktor CNAP
CCIE / Instruktor CNAP
Posty: 419
Rejestracja: 23 lip 2004, 21:16
Lokalizacja: Wrocław, Polska
Kontakt:

Re: Pojawil sie soft FWSM 4.x

#2

#2 Post autor: gaph »

Wszyscy jesteśmy jak widać podnieceni :mrgreen:
| Few people know what actually goes on in the CCIE Lab, it's shrouded in mystery |
| and of course there's the NDA. | Sometimes our friends go to the lab |
| and return CCIEs. | Sometimes they don't return at all. |

kecif
wannabe
wannabe
Posty: 62
Rejestracja: 28 lut 2006, 08:42

#3

#3 Post autor: kecif »

A ktoś przetestował na produkcji ? :-)
Jestem ciekaw jak nowe funkcjonalności sprawują się w porównaniu do wersji 3.X ?

Seba
CCIE/CCDE Site Admin
CCIE/CCDE Site Admin
Posty: 6223
Rejestracja: 15 lip 2004, 20:35
Lokalizacja: Warsaw, PL

#4

#4 Post autor: Seba »

Przetestowac chyba jeszcze nikt nie przetestowal, bo ze tak zacytuje moj cytat:
Note that both features rely on new versions of supervisor code that are
currently expected in an Autumn release.
;)
"Two things are infinite: the universe and human stupidity; and I'm not sure about the universe."
A. Einstein

ODPOWIEDZ