Firewall Sizing

Hello everyone,

I have three questions:

- Switch throughput sizing :

If a switch has a maximum achieved throughput of, for example, 4 Gbps, what is the best approach for sizing the firewall? How should this value be interpreted and used correctly during design?

2- Firewall replacement / sizing :

When replacing an existing firewall due to new requirements (e.g. higher data volume), how should the current throughput be evaluated?

From the HA / system throughput statistics, or

By adding the traffic across all interfaces?

3- Throughput comparison with datasheets When comparing real traffic with the throughput values provided in datasheet, which metric should be used as a reference (e.g. firewall throughput, NGFW throughput, IMIX, with or without security services)?

Thanks in advance for your help.