Performance measurement

1. Product Information

Product versions to be tested:

  • MetaDefender Kiosk 4.7.3

  • MetaDefender Managed File Transfer 3.8.0

  • MetaDefender Core 5.13.0

  • Engines:

    • Metascan:

      • 20 AV engines package + Crowdstrike when testing with CAB file
      • MAX AV engines package when testing with mixed dataset
      • 8 AV engines package when testing with mixed dataset

    • Deep CDR: 7.3.0

    • Proactive DLP: 2.21.1

    • Archive: 7.3.1

    • FileType: 7.3.0

    • File-Based Vulnerability Assessment: 4.2.416.0

2. Environment

MetaDefender Kiosk devices

Using the KIOSK devices in the local test environment. MetaDefender Core is installed on the same system as MetaDefender Kiosk.

ModelCPUMemory (GB)Disk typeOS
K1001 (Dell 7410)

Intel Core i9-13900

Cores: 24

Logical processors: 32

Base speed: 2.00 GHz

32SSD

Windows 10 IoT Enterprise LTSC

Version: 24H2

K1001 (Dell 7420)Intel Core i9-14900 Cores: 24 Logical processors: 32 Base speed: 2.00 GHz32SSD

Windows 10 IoT Enterprise LTSC

Version: 24H2

K2100

Intel Core i7-1260U

Cores: 10

Logical processors: 12

Base speed: 1.10 GHz

32SSD

Windows 10 IoT Enterprise LTSC

Version: 24H2

K3001

Intel Core i9-12900

Cores: 16

Logical processors: 24

Base speed: 2.40 GHz

32SSD

Windows 10 IoT Enterprise LTSC

Version: 24H2

Storage Device

Using to store the dataset and connect to the Kiosk device: 128GB SanDisk USB 3.2 Gen 1

MFT Server

In case the MD Kiosk sends files to MD MFT after scanning, MD MFT is a virtual machine with the following specifications:

OSvCPUMemory (GB)Disk typeNetwork bandwidth (Gbps)
Windows Server 2022816SSD10 Gb Ethernet

Client

Using to run the Python script. The Client is a virtual machine with the following specifications:

OSvCPUMemory (GB)Disk typeNetwork bandwidth (Gbps)
CentOS Linux 7.9816SSD10 Gb Ethernet

3. Test flows

  • Flow 1: MD Kiosk sends CAB file to MD Core for scanning.
  • Flow 2: MD Kiosk sends Mixed dataset to MD Core (MAX AV engines) for scanning.
  • Flow 3: MD Kiosk sends Mixed dataset to MD Core (8 AV engines) for scanning.
  • Flow 4: MD Kiosk sends Mixed dataset to MD Core for scanning, and Allowed files are copied to MD MFT.

4. Dataset

CAB file:

  • Extracted files: 849 479
  • Total size of extracted files: 26.5 GB

Mixed dataset:

  • Summary (compressed):

    • Number of files: 5000
    • Total size: 7728.5 MB
    • Average file size: 1.55 MB

  • Summary (extracted):

    • Number of files: 5260
    • Total size: 7759.5 MB
    • Average file size: 1.48 MB

  • Largest file size: 24.7 MB

  • Smallest file size: 5 KB

File categoryFile typeNumber of filesTotal size (MB)Average file size (MB)
AdobePDF370385 MB1.0 MB
ExecutableEXE45309.5 MB6.9 MB
MSI1545.75 MB3.1 MB
ImageBMP80515 MB6.4 MB
JPG420237.5 MB0.6 MB
PNG345169 MB0.5 MB
MediaMP3135865 MB6.4 MB
MP450500 MB10.0 MB
OfficeDOCX235190 MB0.8 MB
DOC225486 MB2.2 MB
PPTX365860 MB2.4 MB
PPT3551950 MB5.5 MB
XLSX340283.5 MB0.8 MB
XLS335284.5 MB0.8 MB
TextCSV100236 MB2.4 MB
HTML107576 MB0.1 MB
TXT500210 MB0.4 MB
ArchiveZIP

Compressed files: 10

Extracted files: 270

Compressed size: 125.5 MB

Extracted size: 156.5 MB

Avg compressed size: 12.6 MB

Avg extracted size: 0.6 MB

5. MetaDefender Core settings

General settings

  • Turn off data retention
  • Turn off the engine update
  • Max size:
    • File scan: 9999999999999 MB
    • URL file download: 9999999999999 MB

Metascan

  • Enable engines depend on the testing package
  • Per AV engine scan: 1 min
  • Global scan: 10 mins
  • File download: 5 mins

Deep CDR

  • Enable engine
  • 135 file types

Proactive DLP

  • Enable engine

Archive Extraction

  • Enable engine
  • Max recursive level: 99999999
  • Max number of files extracted: 99999999
  • Max total size of extracted files: 99999999
  • Timeout: 90 mins

Archive Compression

  • Enable engine

FileType

  • Enable engine
  • Timeout: 5 mins

File-Based Vulnerability Assessment

  • Enable engine

6. Test Summary

Flow 1: MD Kiosk sends CAB file to MD Core for scanning.

DeviceDurationAvg. CPU UsageAvg. Memory UsageAvg. Disk Speed (KB/s)Throughput (objects/hour)Throughput (objects/hour)

K1001

(Dell 7420)

K1001 (Dell 7420)3 hours 27 minutes50.4%57.6%Read: 2,451.8- Write: 17,118.4246,6590.3
K21008 hours 50 minutes96.9%57.1%Read 1,048.7 - Write 6,559.396,1060.1
K30014 hours 57 minutes64.5%58.0%Read 2,936.1 - Write 10,873.3171,772.50.2

Flow 2: MD Kiosk sends Mixed dataset to MD Core (MAX AV engines) for scanning.

DeviceDurationAvg. CPU UsageAvg. Memory UsageAvg. Disk Speed (KB/s)Throughput (objects/hour)Throughput (files/hour)
K1001 (Dell 7420)
K1001 (Dell 7420)2 hours 21 minutes53.2%69.6%Read: 5,759.6 - Write: 10,892.154,182.72,129.9
K21005 hours 46 minutes94.1%64.5%Read 2,531.1 - Write 5,308.122,024,2865.9
K30013 hours 1 minutes69.0%69.2%Read 4,776.4 - Write 7,963.842,254.61,661.1

Flow 3: MD Kiosk sends Mixed dataset to MD Core (8 AV engines) for scanning.

DeviceDurationAvg. CPU UsageAvg. Memory UsageAvg. Disk Speed (KB/s)Throughput (objects/hour)Throughput (files/hour)

K1001

(Dell 7410)

31 minutes40.9%40.6%Read 14,060.6 Write 17,329247,576.49,729.7
K1001 (Dell 7420)34 minutes34.3%39.6%Read 9,663.6 Write 11,680.4224,683.28,832.2
K21001 hour 22 minutes86.0%43.9%Read 4,650.7 - Write 8,027.192,738.33,645.2
K300159 minutes38.4%38.1%Read 6,403.2 - Write 9,053.2130,441.25,128.2

Flow 4: MD Kiosk sends Mixed dataset to MD Core for scanning, and Allowed files are copied to MD MFT.

DeviceDurationAvg. CPU UsageAvg. Memory UsageAvg. Disk Speed (KB/s)Avg. Network Speed (KB/s)Throughput (objects/hour)Throughput (files/hour)

K1001

(Dell 7420)

K1001 (Dell 7420)1 hour 31 minutes5.8%34.6%Read 5,468.1 Write 4,508Receive 16.8 Send 1,738.3348,242.13,313.1
K21001 hour 19 minutes75.1%45.6%Read 8,155.9 - Write 10,649Receive 8.8 - Send 1,538.7102,4613,786.3
K300150 minutes12.1%35%Read 6,003.2 - Write 7,068.5Receive 58 - Send 3,994.2166,878.45,948.4
Type to search, ESC to discard
Type to search, ESC to discard
Type to search, ESC to discard
On This Page
Performance measurement1. Product Information2. EnvironmentMetaDefender Kiosk devicesStorage DeviceMFT ServerClient3. Test flows4. Dataset5. MetaDefender Core settings6. Test SummaryFlow 1: MD Kiosk sends CAB file to MD Core for scanning.Flow 2: MD Kiosk sends Mixed dataset to MD Core (MAX AV engines) for scanning.Flow 3: MD Kiosk sends Mixed dataset to MD Core (8 AV engines) for scanning.Flow 4: MD Kiosk sends Mixed dataset to MD Core for scanning, and Allowed files are copied to MD MFT.