Remote Windows Assessments: Bandwidth Comparison

General support questions for the Secutor Prime product.
gunnar
Site Admin
Posts: 81
Joined: Fri Feb 23, 2007 8:08 pm
Contact:

Remote Windows Assessments: Bandwidth Comparison

Postby gunnar » Fri Feb 11, 2011 9:04 pm

Recently, while doing other testing, we generated some updated bandwidth statistics. I'm posting a sample that shows the difference between doing a remote agentless assessment or by doing the assessment local to the endpoint and transferring the results back to a central repository, either compressed or uncompressed:


For one of the larger benchmarks, such as the Windows XP OS benchmark, performing the assessment locally and transferring the final results in either the XCCDF thin or Magnus format is approximately:


FORMAT RAW COMPRESSED (.zip)
Magnus: 1500KB 89KB
XCCDF: 700KB 92KB

while a comparitively small benchmark like the XP Firewall looks like this:

FORMAT RAW COMPRESSED (.zip)
Magnus: 89KB 9KB
XCCDF: 222KB 22KB


By contrast, running the OS benchmark against the same XP target remotely (agentless) results in 28812 network packets with a total accumulated payload (both directions) of 8831KB.


This can also be an important consideration for people deciding how to best use Secutor Magnus to perform assessments. Both the passive and active agents use opportunistic compression with typical compressions rates exceeding that of zip compression. When bandwidth utilization is an issue, use of an agent makes a considerable difference.

Return to “Secutor Prime Support”

Who is online

Users browsing this forum: No registered users and 1 guest