IDS/IPS

IDS/IPS

IDS/IPS
IDS/IPS
Saturday - last edited Monday
Model: ER707-M2  
Hardware Version: V1
Firmware Version: 1.2.3 Build 20240822 Rel.52946

Dear support team,

my current router works fine (ER707-M2) but if I turn on the IDS/IPS the transfer rate drops to 20 percent although memory and CPU are under 20 percent load.

I don't understand why. 

 

That is very disappointing.

 

Can I improve the performance of my omada network if I use the Protectly V1410 with OPNsense?

 

Thanks and regards,

Max.

 

 

  0      
  0      
#1
Options
2 Accepted Solutions
Re:IDS/IPS -Solution
Saturday - last edited Monday

  @max_1A 

 

Hi,

 

On the ER707-M2 spec page it is clearly said the IPS efficiency:

 

So if you have a 1Gbps link, it will go down to 200Mbps (about 20%). I believe that's hardware limitation of how many operations on packages can be done by router in one second.

 

I don't know answer to your question regarding "Protectly V1410 with OPNsense", sorry.

 

Cheers

Recommended Solution
  2  
  2  
#2
Options
Re:IDS/IPS -Solution
Monday - last edited Monday

Hi @max_1A 

Thanks for posting in our business forum.

Differences Between Router and Switch

The reason, chipset bottleneck.

Like its name, Deep Packet Inspection. So it inspects every packet you send and identifies its signature.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
Recommended Solution
  2  
  2  
#4
Options
3 Reply
Re:IDS/IPS -Solution
Saturday - last edited Monday

  @max_1A 

 

Hi,

 

On the ER707-M2 spec page it is clearly said the IPS efficiency:

 

So if you have a 1Gbps link, it will go down to 200Mbps (about 20%). I believe that's hardware limitation of how many operations on packages can be done by router in one second.

 

I don't know answer to your question regarding "Protectly V1410 with OPNsense", sorry.

 

Cheers

Recommended Solution
  2  
  2  
#2
Options
Re:IDS/IPS
Saturday
Thank you very much for this information! I would like to understand what limitations these are exactly to avoid this mistake in the future,
  0  
  0  
#3
Options
Re:IDS/IPS -Solution
Monday - last edited Monday

Hi @max_1A 

Thanks for posting in our business forum.

Differences Between Router and Switch

The reason, chipset bottleneck.

Like its name, Deep Packet Inspection. So it inspects every packet you send and identifies its signature.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
Recommended Solution
  2  
  2  
#4
Options