ScreenOS Firewalls (NOT SRX)
ScreenOS Firewalls (NOT SRX)

Ping time very high

‎12-05-2013 05:06 AM

Hi All,

traffic passing through my firewall is giving me high ping time (5ms-10ms), and this is causing problems to us since our application requires time around 2ms, can someone please advice, kindly to note that all PCs and Servers are in the same location, no wan links and far nodes to reach.



Tariq Morad
ScreenOS Firewalls (NOT SRX)

Re: Ping time very high

‎12-05-2013 09:35 PM

Hi Tariq,


There are various contributing figures here, from link speed mismatch to resource utilisation spikes.


To start with, is this lag consistent or is it load dependent? You can look into historic values of CPU / memory / session utilisation and see if you find any spikes there.

ScreenOS Firewalls (NOT SRX)

Re: Ping time very high

‎12-11-2013 08:18 AM

Really the correct way to deal with this issue is either in your application design or your network design. I wouldn't feel confident in guaranteeing latency lower than 5ms at all times through a firewall, particularly a relatively old device such as an SSG or Netscreen. In addition, an application designed to work correctly only with a latency of 2ms is pretty seriously flawed.


I would advise either redesigning how this application connects to whatever it needs to connect to (i.e. bypass the firewall and either route or switch directly), or getting the application modified so it can deal with latency above 2ms. I don't think you'll be able to resolve this permanently by changing anything on the firewall.