Sizing Guide for Forward Proxy Scenarios - Skyhigh Security Web Gateway version 11.2.7 appliances

Last updated
Save as PDF

This document illustrates a subset of the configuration and sizing options for Skyhigh Security Web Gateway. If detailed technical sizing is required, please contact your Skyhigh Security channel sales engineer or representative.

Hardware Specification Appliances

	WBG-5000-F	WBG-5500-F
CPU Cores / Threads	12 / 24	24 / 48
Memory [GB]	64	192
Storage	2x 960 GB SSD, SATA	2x 960 GB SSD, SATA
RAID level	1	1
Web Cache [GB]	410	410
NICs	4 x 100/1000/10000 Mbit/s PCIe RJ-45 Ethernet Ports	4 x 100/1000/10000 Mbit/s PCIe RJ-45 Ethernet Ports
Max Throughput [Mbit] 3	5430	6250
Connections Capacity 4	190000	189000
Rack Space	1 Unit	1 Unit
Power Supply Unit (PSU)	Redundant PSU	Redundant PSU
Remote Management	ASPEED AST2600 BMC	ASPEED AST2600 BMC

Hyper threading enabled
Throughput values are listed as maximums for forward proxy deployment. Security features enabled within the proxy impact throughput and should be evaluated upon sizing.
The connection capacity depends on hardware, SWG policy, and workload to be filtered and can vary.

Web Capacity Appliances

URL filter and Anti Malware

	WBG-5000-F	WBG-5500-F
Internet Bandwidth [Mbps]	56	156
Web Traffic [requests per sec]	678	1900
Employee Count [amount users]	6780	19000

URL filter only

	WBG-5000-F	WBG-5500-F
Internet Bandwidth [Mbps]	353	564
Web Traffic [requests per sec]	4310	6900
Employee Count [amount users]	43100	69000

Hyper threading enabled
Throughput values are listed as maximums for forward proxy deployment. Security features enabled within the proxy impact throughput and should be evaluated upon sizing.
The connection capacity depends on hardware, SWG policy, and workload to be filtered and can vary.

Sizing Guide

The sizing data shown implies an appliance running at 60% of its maximum capacity and SSL scanning enabled at 80%. The anti-malware configuration is set to Full Coverage which is the recommended setting.

Skyhigh Security’s preferred value for sizing Skyhigh Security Web Gateway (SWG) is the number of requests per second, which takes both network traffic (up to Layer 4) and the application load (Layer 7) into consideration. This is important as Web Gateway operates at Layer 7 and is not just looking at data packets. The number of requests per second can usually be obtained from an existing proxy solution. If no existing proxy solution or other technology is available to supply this data, the bandwidth for web protocols can usually be obtained from a firewall or router. When using bandwidth for sizing, it is only necessary to take related traffic into consideration, not the overall bandwidth of the external connection.

Calculations based on the number of users can vary considerably between different organizations. For example, the volume or request rate of an ecommerce company with 1000 users is likely to differ from that of a retail chain company with the same number of employees. Skyhigh Security Web Gateway appliances are licensed based on the number of users. Please use the quoting handbook or contact your Skyhigh Security representative for a definition of users or which SKU should be used.

Skyhigh Security Web Gateway does not require specialized standalone policy management instances, as Central Management is a built-in function of the product. This also applies to anti-malware, data loss protection (DLP), and URL filtering.