Firewall Performance and Security Testing
Measure and optimize the performance, security, and stability of enterprise firewalls

Firewalls have evolved rapidly in recent years to provide content-aware protection for your network, yet legacy testing approaches have not evolved to keep up with them. Can you be certain that your firewall will defend against the latest threats and maintain high throughput in a real enterprise IT environment?
Firewall Testing Challenges
Traditionally, firewall testing used legacy RFC 3511 and RFC 2544 guidelines, which were created at a time when vendors could not accurately simulate stateful application traffic and live attacks. As a result, traditional firewall testing is inadequate because it:
- Focuses only on specific protocols, traffic, or ports--not the full range of conditions present in real-world networks.
- Determines throughput and forwarding rate only for unicast IP packets sent at a constant rate and packet size.
- Does not validate modern technologies such as rate shaping and deep packet inspection (DPI).
- Does not reflect the effects of the actual network traffic and advanced features relevant for today’s firewalls.
BreakingPoint Firewall Test Solutions
Effective firewall testing requires an authentic blend of stateful application traffic combined with live security attacks and massive-scale user load. BreakingPoint products create the actual behavior of millions of wired and wireless users, hundreds of applications, and tens of thousands of security attacks to properly test firewalls. Using BreakingPoint products for firewall testing, you can:
- Validate firewall performance and security under massive load from millions of simultaneous users.
- Put content-aware device capabilities to the test before deployment by creating custom traffic mixes drawn from more than 150 communications, enterprise, social, and gaming application protocols.
- Stress enterprise firewalls by selecting from more than 30,000 live security attacks and malware, plus obfuscations and evasions, to pinpoint potential vulnerabilities.