Abstract

Tolly Group Report #202143 (August 2002) evaluates Bivio Networks’ Bivio 1000 security platform running Check Point FireWall-1 NG software. Engineers tested two Gigabit-Ethernet interfaces in both a single-rule “allow all” mode and a 100-rule deny-all policy, driving up to 200,000 concurrent UDP sessions in bidirectional, zero-loss traffic to verify gigabit-class firewall performance.

Throughput results. The appliance sustained wire-speed (2 Gb/s) forwarding for 256-, 512-, 1,024-, and 1,518-byte packets and held 96% of theoretical bandwidth at 128 bytes and 82% at 64 bytes, even with 100 active rules. Performance remained line-rate as session counts scaled from two to 200,000 and as rule sets increased, demonstrating deterministic throughput under heavy policy and session load.

Implications. By pairing Check Point software with Bivio’s eXpressLANE packet-processing ASICs, the Bivio 1000 delivers gigabit firewalling without the throughput penalties typical of software-only solutions, giving enterprises and carriers a single chassis that sustains high performance while enforcing extensive security policies.