Performance measurement

1. Environment

Using the KIOSK devices in the local test environment.

MetaDefender Core is installed on the same system as MetaDefender Kiosk.

ModelCPUMemory (GB)Disk typeOS
K1001

Intel Core i9-13900

Cores: 24

Logical processors: 32

Base speed: 2.00 GHz

32SSD

Windows 10 IoT Enterprise LTSC

Version: 21H2

K2100

Intel Core i7-1260U

Cores: 10

Logical processors: 12

Base speed: 1.10 GHz

32SSD

Windows 10 IoT Enterprise LTSC

Version: 21H2

K3001

Intel Core i9-12900

Cores: 16

Logical processors: 24

Base speed: 2.40 GHz

32SSD

Windows 10 IoT Enterprise LTSC

Version: 21H2

Storage Device

Using to store the dataset and connect to the Kiosk device: 128GB SanDisk USB 3.2 Gen 1

MFT Server

In case the MD Kiosk sends files to MD MFT after scanning, MD MFT is a virtual machine with the following specifications:

OSvCPUMemory (GB)Disk typeNetwork bandwidth (Gbps)
Windows Server 2022816SSD10 Gb Ethernet

Client

Using to run the Python script. The Client is a virtual machine with the following specifications:

OSvCPUMemory (GB)Disk typeNetwork bandwidth (Gbps)
CentOS Linux 7.9816SSD10 Gb Ethernet

2. Product Information

Product versions to be tested:

  • MetaDefender Managed File Transfer 3.6.2

  • MetaDefender Core 5.9.0

  • Engines:

    • Metascan:

      • 20 AV engines package + Crowdstrike when testing with CAB file
      • MAX AV engines package when testing with mixed dataset

    • Deep CDR: 7.0.1

    • Proactive DLP: 2.19.0

    • Archive: 7.0.1

    • FileType: 7.0.0

    • File-Based Vulnerability Assessment: 4.2.416.0

3. Test flows

  • Flow 1: MD Kiosk sends CAB file to MD Core for scanning.
  • Flow 2: MD Kiosk sends Mixed dataset to MD Core for scanning.
  • Flow 3: MD Kiosk sends Mixed dataset to MD Core for scanning, and Allowed files are copied to MD MFT.
  • Flow 4: MD Kiosk sends Mixed dataset to MD Core for scanning, and Allowed files are copied to the network shared location.

4. Dataset

CAB file:

  • Extracted files: 849 479
  • Total size of extracted files: 26.5 GB

Mixed dataset:

  • Summary (compressed):

    • Number of files: 5000
    • Total size: 7728.5 MB
    • Average file size: 1.55 MB

  • Summary (extracted):

    • Number of files: 5260
    • Total size: 7759.5 MB
    • Average file size: 1.48 MB

  • Largest file size: 24.7 MB

  • Smallest file size: 5 KB

File categoryFile typeNumber of filesTotal size (MB)Average file size (MB)
AdobePDF370385 MB1.0 MB
ExecutableEXE45309.5 MB6.9 MB
MSI1545.75 MB3.1 MB
ImageBMP80515 MB6.4 MB
JPG420237.5 MB0.6 MB
PNG345169 MB0.5 MB
MediaMP3135865 MB6.4 MB
MP450500 MB10.0 MB
OfficeDOCX235190 MB0.8 MB
DOC225486 MB2.2 MB
PPTX365860 MB2.4 MB
PPT3551950 MB5.5 MB
XLSX340283.5 MB0.8 MB
XLS335284.5 MB0.8 MB
TextCSV100236 MB2.4 MB
HTML107576 MB0.1 MB
TXT500210 MB0.4 MB
ArchiveZIP

Compressed files: 10

Extracted files: 270

Compressed size: 125.5 MB

Extracted size: 156.5 MB

Avg compressed size: 12.6 MB

Avg extracted size: 0.6 MB

5. MetaDefender Core settings

General settings

  • Turn off data retention
  • Turn off the engine update
  • Max size:
    • File scan: 9999999999999 MB
    • URL file download: 9999999999999 MB

Metascan

  • Enable engines depend on the testing package
  • Per AV engine scan: 1 min
  • Global scan: 10 mins
  • File download: 5 mins

Deep CDR

  • Enable engine
  • 135 file types

Proactive DLP

  • Enable engine

Archive Extraction

  • Enable engine
  • Max recursive level: 99999999
  • Max number of files extracted: 99999999
  • Max total size of extracted files: 99999999
  • Timeout: 90 mins

Archive Compression

  • Enable engine

FileType

  • Enable engine
  • Timeout: 5 mins

File-Based Vulnerability Assessment

  • Enable engine

6. Test Summary

Flow 1: MD Kiosk sends CAB file to MD Core for scanning.

DeviceDurationAvg. CPU UsageAvg. Memory UsageAvg. Disk Speed (KB/s)Throughput (objects/hour)
K10016h 48m26.7%51.5%

Read: 475.6

Write: 7554

124 863.8
K210017h 7m49.7%49.8%

Read: 295.8

Write: 3613.8

49 643.8
K30018h 58m33.4%55.2%

Read: 425.2

Write: 5649.7

94 776.3

Flow 2: MD Kiosk sends Mixed dataset to MD Core for scanning.

DeviceDurationAvg. CPU UsageAvg. Memory UsageAvg. Disk Speed (KB/s)Throughput (objects/hour)Throughput (files/hour)
K100120h 3m7.8%70.7%

Read: 735.7

Write: 1454.5

6345.2249.5
K210028h 18m21.9%66.6%

Read: 412.3

Write: 1160.2

3822.4176.6
K300122h 42m11.%72.1%

Read: 640.6

Write: 1319

5601.2220.2

Flow 3: MD Kiosk sends Mixed dataset to MD Core for scanning, and Allowed files are copied to MD MFT.

Upload a zip archive containing the allowed files:

DeviceDurationAvg. CPU UsageAvg. Memory UsageAvg. Disk Speed (KB/s)Avg. Network Speed (KB/s)Throughput (objects/hour)Throughput (files/hour)
K1001Total: 21h 22m Scan: 21h 20m8.5%71.6%Read: 971.5 Write: 1419.6

Receive: 1.3

Send: 96.5

5959.9234
K2100Total: 27h 42m Scan: 27h 40m24.8%56.2%Read: 550.8 Write: 1544.4

Receive: 1

Send: 71.5

4000.3180.5
K3001Total: 23h 12m Scan: 23h 10m12.3%72.1%Read: 1040.2 Write: 1994.8

Receive: 1.2

Send: 90.4

5481.1215.5

Upload files and preserve directory structure:

DeviceDurationAvg. CPU UsageAvg. Memory UsageAvg. Disk Speed (KB/s)Avg. Network Speed (KB/s)Throughput (objects/hour)Throughput (files/hour)
K1001Total: 17h 17m Scan: 21h 15m9.7%70.8%Read: 793.8 Write: 1608.8

Receive: 1.4

Send: 92.3

5983.9229.6
K2100Total: 28h 48m Scan: 28h 14m32.3%66.4%Read: 589.8 Write: 1311.7

Receive: 15.1

Send: 70.2

3781.8173.6
K3001Total: 23h 30m Scan: 23h 00m13.9%69.2%Read: 670.6 Write: 1353.1

Receive: 3.2

Send: 72.0

5454.6212.7
Type to search, ESC to discard
Type to search, ESC to discard
Type to search, ESC to discard
On This Page
Performance measurement1. EnvironmentStorage DeviceMFT ServerClient2. Product Information3. Test flows4. Dataset5. MetaDefender Core settings6. Test SummaryFlow 1: MD Kiosk sends CAB file to MD Core for scanning.Flow 2: MD Kiosk sends Mixed dataset to MD Core for scanning.Flow 3: MD Kiosk sends Mixed dataset to MD Core for scanning, and Allowed files are copied to MD MFT.