Skip to main content
Imad98
New Member
May 20, 2025
Question

Firewall cluster

  • May 20, 2025
  • 2 replies
  • 643 views

Hello ,

 

Our client is requesting a firewall cluster consisting of two physical appliances (we don't know whether this is active/active or active/passive).
He has requested a requirement : "Threat prevention throughput of the firewall cluster: minimum 18 Gbps." Does this throughput need to be guaranteed for each firewall, given that the traffic will ultimately be handled by a single firewall? Or does this mean that each must ensure a minimum of 9 Gbps?

 

2 replies

funkylicious
SuperUser
SuperUser
May 20, 2025

hi,

i would say that this is directly related/influenced by the way you configure the cluster.

if it's A/P, then 18Gbps of TP throughput should have each device, else if A/A when both are being used each should have at least 9Gbps.

"jack of all trades, master of none"
Imad98
Imad98Author
New Member
May 20, 2025

@funkylicious 

Thakns for your answer .

But I didn't unserstand . Even if the architecture is A/A , only one firewall will handle this traffic we cannot split this traffic through a single session . 

What is your opinion ?

 

Thanks

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!