Installation guide

McAfee® Network Security Platform 6.0

Network Scenarios for Sensor High Availability

Solution:

Each 4010 can scan up to 2 Gbps at any time -standalone or part of an HA pair.

In the above case, the aggregate throughput for the pair would be 2Gbps - processed on

each Sensor.

As long as the traffic on the monitoring ports of the Sensor on both the active links stays at

or below an aggregate rate of 2 Gbps, the deployment works fine.

I-4010 Sensor in Active/Passive HA mode

Scenario:

Suppose there are two I-4010's in active/passive HA mode with 1 Gbps throughput in full

duplex (500Mbps of traffic in both directions), then how does the pair work?

Solution:

In the above case, the aggregate throughput for the pair would be 2Gbps - 2 Gbps on the

active Sensor and 0 Gbps on the passive Sensor.

In this scenario, the Sensor on the active link receives 1 Gbps of traffic on its monitoring

ports and nothing on its HA ports, because the other Sensor is on the passive link. The

Sensor on the Active link sends a copy of the 1 Gbps of traffic to its peer and processes

the same traffic without issue- because 1 Gbps is only 50% of the single Sensor

throughput.

The 500 Mbps of traffic in each direction, i.e., total 1 Gbps of traffic is well under what the

I-4010 Sensor can handle. Even if the 1 Gbps link is fully saturated, the total would be 2

Gbps in full duplex and this can be handled by the Sensor.