Enterprise Firewall Performance Tester

The “no-fuss” way to test enterprise firewall performance.

Quickly & easily compare firewall performance

under different conditions. Which is fastest?

Which features slow it down most? How many users

and apps before it hits breaking point?

Fast answers to tough questions.

About Safire

Enterprise firewalls improve network security by segmenting corporate LANs. However, each of the advanced security functions (e.g. antivirus, app-control, IPS and SSL decryption) has a performance penalty. Combined, these features can seriously reduce network performance (in some instance up to 90%) – frustrating users and reducing business performance.

Safire is the only solution on the market that solves this problem quickly and cost-effectively.

Simply connect Safire to your firewall, define a traffic profile that matches your network, and select the features you want to measure. Initiate the test and in minutes Safire will compile a PDF report detailing how each feature impacts performance, with easy-to-understand graphs that clearly pinpoint the firewall’s breaking point and a wealth of other data.

Safire is a simple and cost-efficient tool for testing firewall performance prior to deployment:

  • Comparing different enterprise firewalls prior to purchasing
  • Validating performance prior to installation

It can also pay to test firewall performance after it has been deployed:

  • Checking performance after firewall software updates and patches
  • Verifying performance following significant LAN traffic changes
  • Measuring performance impact of emerging applications
Founder of the Tolly Group

Kevin Tolly:

“A firewall can slow down an entire business. Safire brings unprecedented visibility to firewall performance.”

White Papers

… for firewall performance testing

Safire Videos

See how easy it is

How to configure custom traffic profiles

(4:35) How to configure and customize traffic profiles in Safire so they accurately match a specific organization.

How to set up test cases

(7:17) How to configure & run Safire test cases, and analyze the performance results of an enterprise firewall.

How to define the firewall you want to test

(3:28) How to define a new “firewall-under-test” for Safire to test.

How to use the “Auto Traffic Profiler” feature

(5:40) Safire’s “Auto Traffic Profiler” feature uses firewall log files to very precisely recreate the same type of of traffic when measuring the performance of the firewall for maximum accuracy.

How to buy & assign licenses

(3:58) How to use the Xena License Portal to buy and assign licenses for Safire, Xena’s enterprise firewall performance tester.

How to compare Safire test reports

(5:22) A key feature of Safire is the test result analyzer which compares the results of selected tests.

This is a great way to get an instant overview of key parameters derived from multiple tests.

System Diagram


Safire is controlled via a simple web-interface called SafireManager. Users are guided through the few simple steps of connecting to the firewall and defining each variable relevant to the test – which network scenario and traffic profile to use, how many users to be emulated, which firewall features are enabled and so on. This typically takes only a few clicks, and then Safire is ready to start testing.

Every network has a unique traffic profile defined by the applications being used, the number of users, the data and security policies, the network topology and so on. Performance testing enterprise firewalls – where application-awareness is widely used for policing the traffic – requires unique traffic that matches the traffic profile of that network. To help you do this, Safire includes an extensive library of application traffic to maximize the accuracy of the test.

Once the test is completed, Safire generates a simple-to-read PDF report that summarizes the the key findings on the front page, followed by a wealth of graphical data so you can instantly spot any serious performance issues.


Here you can see the traffic profile derived from Safire’s application library.


The graphs show various measurements such as goodput, errors, latency, sessions, malware passed, and firewall CPU and memory usage. Charts can be resized to speed up result analysis.


This is where you run/stop test and download report after test is finished.

Two versions


A lightweight, easy-to-transport chassis:

Dimensions (W x H x D):
19” (48cm) x  1.75” (4.5cm) x 9.8” (25cm)
Weight: 10lbs (4.5kg)


2 x 10GE test ports for testing 1GE & 10GE.


2 x 10GE copper test ports for testing 1GE, 2.5GE, 5GE & 10GE.


You’re going to love this!

Safire Tester

The tester itself (either model shown above) will cost you $7,999.

This includes three 1-month licenses that you can activate as needed.

1 month License

Each one-month license costs $999. That’s it.

While the software license is active, you can use Safire as much as you like, and access Xena’s full range of technical support services. The month licenses do not have to be used consecutively – you activate them when you need them. You can always buy additional licenses, via the Xena License Portal.

If the license expires, you need to pay an additional $249 service activation fee to start using the tester again. There are no other costs.


Why Performance Test Your Enterprise Firewall?

This is a must-see webinar for network, security, infrastructure and application teams striving to optimize the balance between firewall security and the user experience.

Latest features


Use Safire to analyze test results for different scenarios, view comparison charts, and download analysis reports. Analysis scenarios supported are firewall migration, firewall firmware upgrade, firewall vendor comparison, firewall configuration change, and traffic profile change.


All the documentation about Safire products

Not what you’re looking for? Check our:

Try it now:

Fill in the form below and we will send you a URL where you can connect to the Safire tester on Xena’s live demo system. We’ll include instructions on how to connect and use Safire’s web-based GUI.

  • Shortly after submitting this form, you will receive an email with files and instructions on how you begin your Safire demo.

See him present the results - and discuss the implications.

Tolly Tests Safire 

Did you know you can try Safire right now?

It's easy. Just download the software and connect in seconds to a live test network so you can see how different features work. 

Try Safire Live