Performance measurement

1. Environment

Using the KIOSK devices in the local test environment.

MetaDefender Core is installed on the same system as MetaDefender Kiosk.

Model

CPU

Memory (GB)

Disk type

OS

K1001

Intel Core i9-13900

Cores: 24

Logical processors: 32

Base speed: 2.00 GHz

32

SSD

Windows 10 IoT Enterprise LTSC

Version: 21H2

K2100

Intel Core i7-1260U

Cores: 10

Logical processors: 12

Base speed: 1.10 GHz

32

SSD

Windows 10 IoT Enterprise LTSC

Version: 21H2

K3001

Intel Core i9-12900

Cores: 16

Logical processors: 24

Base speed: 2.40 GHz

32

SSD

Windows 10 IoT Enterprise LTSC

Version: 21H2

Storage Device

Using to store the dataset and connect to the Kiosk device: 128GB SanDisk USB 3.2 Gen 1

MFT Server

In case the MD Kiosk sends files to MD MFT after scanning, MD MFT is a virtual machine with the following specifications:

OS

vCPU

Memory (GB)

Disk type

Network bandwidth (Gbps)

Windows Server 2022

8

16

SSD

10 Gb Ethernet

Client

Using to run the Python script. The Client is a virtual machine with the following specifications:

OS

vCPU

Memory (GB)

Disk type

Network bandwidth (Gbps)

CentOS Linux 7.9

8

16

SSD

10 Gb Ethernet

2. Product Information

Product versions to be tested:

  • MetaDefender Managed File Transfer 3.6.2

  • MetaDefender Core 5.9.0

  • Engines:

    • Metascan:

      • 20 AV engines package + Crowdstrike when testing with CAB file

      • MAX AV engines package when testing with mixed dataset

    • Deep CDR: 7.0.1

    • Proactive DLP: 2.19.0

    • Archive: 7.0.1

    • FileType: 7.0.0

    • File-Based Vulnerability Assessment: 4.2.416.0

3. Test flows

  • Flow 1: MD Kiosk sends CAB file to MD Core for scanning.

  • Flow 2: MD Kiosk sends Mixed dataset to MD Core for scanning.

  • Flow 3: MD Kiosk sends Mixed dataset to MD Core for scanning, and Allowed files are copied to MD MFT.

  • Flow 4: MD Kiosk sends Mixed dataset to MD Core for scanning, and Allowed files are copied to the network shared location.

4. Dataset

CAB file:

  • Extracted files: 849 479

  • Total size of extracted files: 26.5 GB

Mixed dataset:

  • Summary (compressed):

    • Number of files: 5000

    • Total size: 7728.5 MB

    • Average file size: 1.55 MB

  • Summary (extracted):

    • Number of files: 5260

    • Total size: 7759.5 MB

    • Average file size: 1.48 MB

  • Largest file size: 24.7 MB

  • Smallest file size: 5 KB

File category

File type

Number of files

Total size (MB)

Average file size (MB)

Adobe

PDF

370

385 MB

1.0 MB

Executable

EXE

45

309.5 MB

6.9 MB


MSI

15

45.75 MB

3.1 MB

Image

BMP

80

515 MB

6.4 MB


JPG

420

237.5 MB

0.6 MB


PNG

345

169 MB

0.5 MB

Media

MP3

135

865 MB

6.4 MB


MP4

50

500 MB

10.0 MB

Office

DOCX

235

190 MB

0.8 MB


DOC

225

486 MB

2.2 MB


PPTX

365

860 MB

2.4 MB


PPT

355

1950 MB

5.5 MB


XLSX

340

283.5 MB

0.8 MB


XLS

335

284.5 MB

0.8 MB

Text

CSV

100

236 MB

2.4 MB


HTML

1075

76 MB

0.1 MB


TXT

500

210 MB

0.4 MB

Archive

ZIP

Compressed files: 10

Extracted files: 270

Compressed size: 125.5 MB

Extracted size: 156.5 MB

Avg compressed size: 12.6 MB

Avg extracted size: 0.6 MB

5. MetaDefender Core settings

General settings

  • Turn off data retention

  • Turn off the engine update

  • Max size:

    • File scan: 9999999999999 MB

    • URL file download: 9999999999999 MB

Metascan

  • Enable engines depend on the testing package

  • Per AV engine scan: 1 min

  • Global scan: 10 mins

  • File download: 5 mins

Deep CDR

  • Enable engine

  • 135 file types

Proactive DLP

  • Enable engine

Archive Extraction

  • Enable engine

  • Max recursive level: 99999999

  • Max number of files extracted: 99999999

  • Max total size of extracted files: 99999999

  • Timeout: 90 mins

Archive Compression

  • Enable engine

FileType

  • Enable engine

  • Timeout: 5 mins

File-Based Vulnerability Assessment

  • Enable engine

6. Test Summary

Flow 1: MD Kiosk sends CAB file to MD Core for scanning.

Device

Duration

Avg. CPU Usage

Avg. Memory Usage

Avg. Disk Speed (KB/s)

Throughput (objects/hour)

K1001

6h 48m

26.7%

51.5%

Read: 475.6

Write: 7554

124 863.8

K2100

17h 7m

49.7%

49.8%

Read: 295.8

Write: 3613.8

49 643.8

K3001

8h 58m

33.4%

55.2%

Read: 425.2

Write: 5649.7

94 776.3

Flow 2: MD Kiosk sends Mixed dataset to MD Core for scanning.

Device

Duration

Avg. CPU Usage

Avg. Memory Usage

Avg. Disk Speed (KB/s)

Throughput (objects/hour)

Throughput (files/hour)

K1001

20h 3m

7.8%

70.7%

Read: 735.7

Write: 1454.5

6345.2

249.5

K2100

28h 18m

21.9%

66.6%

Read: 412.3

Write: 1160.2

3822.4

176.6

K3001

22h 42m

11.%

72.1%

Read: 640.6

Write: 1319

5601.2

220.2

Flow 3: MD Kiosk sends Mixed dataset to MD Core for scanning, and Allowed files are copied to MD MFT.

Upload a zip archive containing the allowed files:

Device

Duration

Avg. CPU Usage

Avg. Memory Usage

Avg. Disk Speed (KB/s)

Avg. Network Speed (KB/s)

Throughput (objects/hour)

Throughput (files/hour)

K1001

Total: 21h 22m Scan: 21h 20m

8.5%

71.6%

Read: 971.5 Write: 1419.6

Receive: 1.3

Send: 96.5

5959.9

234

K2100

Total: 27h 42m Scan: 27h 40m

24.8%

56.2%

Read: 550.8 Write: 1544.4

Receive: 1

Send: 71.5

4000.3

180.5

K3001

Total: 23h 12m Scan: 23h 10m

12.3%

72.1%

Read: 1040.2 Write: 1994.8

Receive: 1.2

Send: 90.4

5481.1

215.5

Upload files and preserve directory structure:

Device

Duration

Avg. CPU Usage

Avg. Memory Usage

Avg. Disk Speed (KB/s)

Avg. Network Speed (KB/s)

Throughput (objects/hour)

Throughput (files/hour)

K1001

Total: 17h 17m Scan: 21h 15m

9.7%

70.8%

Read: 793.8 Write: 1608.8

Receive: 1.4

Send: 92.3

5983.9

229.6

K2100

Total: 28h 48m Scan: 28h 14m

32.3%

66.4%

Read: 589.8 Write: 1311.7

Receive: 15.1

Send: 70.2

3781.8

173.6

K3001

Total: 23h 30m Scan: 23h 00m

13.9%

69.2%

Read: 670.6 Write: 1353.1

Receive: 3.2

Send: 72.0

5454.6

212.7


null
On This Page
Performance measurement1. Environment2. Product Information3. Test flows4. Dataset5. MetaDefender Core settings6. Test SummaryStorage DeviceMFT ServerClientFlow 1: MD Kiosk sends CAB file to MD Core for scanning.Flow 2: MD Kiosk sends Mixed dataset to MD Core for scanning.Flow 3: MD Kiosk sends Mixed dataset to MD Core for scanning, and Allowed files are copied to MD MFT.