Measured event size · Firewall
Forcepoint Firewall log size: 561 bytes per event
The average Forcepoint Firewall event is 561 bytes, measured from samples of its logs. A firewall source typically produces 600 events per second per device, bursting to 3,000: per appliance; TLS inspection multiplies it. The rate is an informed estimate; the size is measured.
What that comes to
One device, raw bytes, at the typical rate for a firewall source.
| Period | At 600 events/s | At the 3,000 events/s burst |
|---|---|---|
| An hour | 1.2 GB | 6.1 GB |
| A day | 29.1 GB | 145 GB |
| 90 days | 2.6 TB | 13.1 TB |
| A year | 10.6 TB | 53.1 TB |
A day of Forcepoint Firewall logs from one device at the category's typical rate, 29.1 GB, is about the size of Fortnite on PC.
Size your own
Raw bytes, before compression, indexing overhead and replication.
Measure a sample of your own
The figure above is an average; yours will differ, and for Forcepoint Firewall what moves it most is this: per appliance; TLS inspection multiplies it. The profiler reads a sample from Forcepoint Firewall in your browser, line by line, one event per line, and reports the bytes per line to set against it. Nothing is uploaded.
Other firewall sources
- Palo Alto Firewall734 B
- PaloAlto Networks OS348 B
- Checkpoint FW200 B
The firewall category: its typical rate and every source in it →
Logcaliper, free on iOS, has these sizes and rates built in and sizes a whole list of sources at retention: storage, cluster capacity, nodes.