Safire

Enterprise Firewall Performance Tester

USED BY:

Enterprise IT
Network Security
System Integrators
Data Centers
Finance
Government
Defense

TECHNOLOGIES:

Network Security

TEST APPLICATIONS:

Performance Testing
Functional Testing
Quality of Service
Security

About Safire

Enterprise firewalls improve network security by segmenting corporate LANs. However, each of the advanced security functions (e.g. antivirus, app-control, IPS and SSL decryption) has a performance penalty. Combined, these features can seriously reduce network performance (in some instance up to 90%) – frustrating users and reducing business performance.

Safire is the only solution on the market that solves this problem quickly and cost-effectively.

Simply connect Safire to your firewall, define a traffic profile that matches your network, and select the features you want to measure. Initiate the test and in minutes Safire will compile a PDF report detailing how each feature impacts performance, with easy-to-understand graphs that clearly pinpoint the firewall’s breaking point and a wealth of other data.

Safire is a simple and cost-efficient tool for testing firewall performance prior to deployment:

  • Comparing different enterprise firewalls prior to purchasing
  • Validating performance prior to installation

It can also pay to test firewall performance after it has been deployed:

  • Checking performance after firewall software updates and patches
  • Verifying performance following significant LAN traffic changes
  • Measuring performance impact of emerging applications

The no-fuss way to test

Enterprise Firewall Performance

EXAMPLE OF USE

Enterprise Firewalls

Firewalls are essential for securing corporate networks. Understanding their impact on network performance is essential for business efficiency.

That’s why Xena developed Safire.

EXAMPLE OF USE

IT Managers

IT managers must constantly balance the need for network security with the need for fast, ubiquitous access to network resources.

Firewalls are great for security but they can seriously impact network performance. That’s frustrating for users and bad for business. Up until now, pinpointing the problem has been a real headache for IT managers. That’s why Xena developed Safire.

System Diagram

Software

SafireManager

Safire is controlled via a simple web-interface called SafireManager. Users are guided through the few simple steps of connecting to the firewall and defining each variable relevant to the test – which network scenario and traffic profile to use, how many users to be emulated, which firewall features are enabled and so on. This typically takes only a few clicks, and then Safire is ready to start testing.

Every network has a unique traffic profile defined by the applications being used, the number of users, the data and security policies, the network topology and so on. Performance testing enterprise firewalls – where application-awareness is widely used for policing the traffic – requires unique traffic that matches the traffic profile of that network. To help you do this, Safire includes an extensive library of application traffic to maximize the accuracy of the test.

Once the test is completed, Safire generates a simple-to-read PDF report that summarizes the the key findings on the front page, followed by a wealth of graphical data so you can instantly spot any serious performance issues.

1

Here you can see the traffic profile derived from Safire’s application library.

2

The graphs show various measurements such as goodput, errors, latency, sessions, malware passed, and firewall CPU and memory usage. Charts can be resized to speed up result analysis.

3

This is where you run/stop test and download report after test is finished.

Easy to transport

SAFIRECOMPACT

A lightweight, easy-to-transport chassis:

Dimensions
– W: 19” (48.26cm)
– H: 1.75” (4.45cm)
– D: 9.8” (25cm)
– Weight: 10lbs (4.5kg)

C-Safire-24PE-10G:

2 x 10GE test ports and access to 24 packet engines.

C-Safire-24PE-10G-CU:

2 x 10GE copper test ports and access to 24 packet engines.

LATEST FEATURES

NEW UI AND NEW EXPERIENCE

Testing and analysis are grouped separately into two sections, and an always-on navigation bar helps the user quickly navigate among pages. Test case configuration process is greatly simplified by a single-page panel.

FIREWALL UNDER TEST OBJECT

Create and save firewall under test objects and quickly select from the list when configuring a test case. This greatly simplifies the test case configuration process and delivers supreme user experience.

SEAMLESS RESTORATION FROM BACKUP

Users can seamlessly restore the entire chassis from a backup with no worry about version compatibility, as if the user had a time machine.

AUTOMATED PERFORMANCE TEST

Automatically increase traffic load to find the performance bottleneck of the firewall under test.

CONFIGURABLE TRAFFIC PROFILES

Configurable traffic mix profiles from a rich application emulation library to match enterprise and data center traffic patterns for even greater realism and flexibility.

SSL DECRYPTION SUPPORT

Application traffic profiles support inbound and outbound SSL decryption for performance testing.

SOURCE & DESTINATION NAT SUPPORT

These important features enable Safire to better support for enterprise perimeter firewall testing & data center testing.

FIREWALL RESOURCE USAGE MONITORING

Monitoring firewall CPU and memory usage while performance test is running by CLI commands.

COMING SOON

TRAFFIC PROFILE IMPORT AND EXPORT

Users can transfer traffic profiles between chassis, facilitating team cooperation.

FIREWALL REST API SUPPORT

Monitor firewalls using their REST API in addition to CLI.

USE CASE ANALYSIS

Data analysis to compare and analyze different test results and generate corresponding reports.

AUTOMATED TRAFFIC PROFILE GENERATION

Generate traffic profiles based on real-world monitoring information to match the unique traffic pattern in the production network. Extremely useful for production network firewall regression testing and assessment.

AUTO-FETCH FIREWALL SYSTEM INFORMATION AND POLICY CONFIGURATION

Prevent human mistakes when configuring test cases by auto reading information from the firewall under test.

DOCUMENTATION

All the documentation about Safire products

Not what you’re looking for? Check our:

White Papers

… on firewall testing

Try it now

Fill in the form below and we will send you a URL where you can connect to the Safire tester on Xena’s live demo system. We’ll include instructions on how to connect and use Safire’s web-based GUI.

  • Shortly after submitting this form, you will receive an email with files and instructions on how you begin your Safire demo.

Did you know you can try Safire right now?

It's easy. Just download the software and connect in seconds to a live test network so you can see how different features work.