SWG 13.0 F Model Appliance Sizing Guide
This document illustrates a subset of the configuration and sizing options for Skyhigh Security Web Gateway version 13.0.0. If detailed technical sizing is required, please contact your Skyhigh Security channel sales engineer or representative.
Hardware Specification Appliances
| Parameter | WBG-5000-F | WBG-5500-F |
|---|---|---|
| CPU Cores / Threads1 | 12 / 241 | 48/961 |
| Memory [GB] | 64 | 192 |
| Storage | 2x 960 GB SSD, SATA |
2x 960 GB SSD, SATA |
| RAID level | 1 | 1 |
| Web Cache [GB] | 410 | 410 |
| NICs | 4 x 100/1000/10000 Mbit/s PCle | 4 x 100/1000/10000 Mbit/s PCle |
| RJ-45 Ethernet Ports | RJ-45 Ethernet Ports | |
| Max Throughput [Mbit] 2 | 5467 | 5822 |
| Connections Capacity 3 | 178618 | 189448 |
| Rack Space | 1 Unit | 1 Unit |
| Power Supply Unit (PSU) | Redundant PSU | Redundant PSU |
| Remote Management | ASPEED AST2600 BMC | ASPEED AST2600 BMC |
NOTE:
1 Hyper threading enabled.
2 Throughput values are listed as maximums for forward proxy deployment. Security features enabled within the proxy impact throughput and should be evaluated upon sizing.
3 The connection capacity depends on hardware, SWG policy, and workload to be filtered and can vary.
Sizing Guide for Forward Proxy Scenarios
Use this guide to determine the recommended appliance sizing for forward proxy deployments based on workload, traffic patterns, and enabled security features.
Sizing Assumptions
This sizing guide assumes the following conditions:
- The appliance operates at 60% of its maximum capacity.
- SSL (HTTPS) scanning is enabled for 80% of traffic.
- Anti-malware uses the Full Coverage configuration, which Skyhigh Security recommends.
Recommended Sizing Method
Skyhigh Security recommends using the following metrics for sizing, in order of priority:
- Peak bandwidth for web traffic
- Requests per second (RPS)
These workload-based metrics provide more accurate sizing because they reflect real-world traffic patterns and application processing requirements.
- Obtain peak bandwidth data from a firewall or router.
- Collect RPS data from an existing proxy deployment.
When sizing based on bandwidth, include only web-related traffic instead of the total external network bandwidth.
This method provides more reliable results because Web Gateway operates at Layer 7 and evaluates both:
- Network traffic processing (up to Layer 4)
- Application-level processing (Layer 7)
User-Based Sizing Considerations
User-based sizing can vary significantly across organizations. For example, an ecommerce company with 1,000 users may generate much higher traffic volume and request rates than a retail organization with the same number of users.
Although user-based sizing may not accurately represent actual workload requirements, you can use it as an initial estimate when bandwidth or RPS data is unavailable.
NOTE: Skyhigh Security licenses Web Gateway appliances based on the number of users. Refer to the quoting handbook or contact your Skyhigh Security representative for user definitions and SKU recommendations.
Architecture and Management
Skyhigh Security Web Gateway includes built-in Central Management and does not require dedicated standalone policy management servers.
The integrated management framework also supports:
- Anti-malware
- Data Loss Prevention (DLP)
- URL filtering
Important Considerations
- The sizing calculations assume that hyperthreading is enabled.
- Security features enabled within the proxy can significantly affect throughput and require proper evaluation during sizing.
- Features such as authentication, URL filtering, media type filtering, anti-malware scanning, and SSL decryption can reduce throughput by more than 10x.
- Connection capacity varies depending on:
- Hardware platform
- Web policy configuration
- Traffic characteristics and workload complexity
Recommendations for Sizing the Web and User Parameters When Performing Anti-malware and URL Filtering
| Parameter | WBG-5000-F | WBG-5500-F |
|---|---|---|
| Internet Bandwidth (in Mbit/s) | 38 | 132 |
| Web Traffic (in requests per second) | 454 | 1606 |
| Employee Count (number of users) | 4540 | 16060 |
Recommendations for Sizing the Web and User Parameters When Only Performing URL Filtering
| Parameter | WBG-5000-F | WBG-5500-F |
|---|---|---|
| Internet Bandwidth (in Mbit/s) | 463 | 766 |
| Web Traffic (in requests per second) | 5667 | 9372 |
| Employee Count (number of users) | 56670 | 93720 |