Performance measurement

1. Product Information

Product versions to be tested:

MetaDefender Kiosk 4.7.3
MetaDefender Managed File Transfer 3.8.0
MetaDefender Core 5.13.0
Engines:
- Metascan:
  - 20 AV engines package + Crowdstrike when testing with CAB file
  - MAX AV engines package when testing with mixed dataset
  - 8 AV engines package when testing with mixed dataset
- Deep CDR: 7.3.0
- Proactive DLP: 2.21.1
- Archive: 7.3.1
- FileType: 7.3.0
- File-Based Vulnerability Assessment: 4.2.416.0

2. Environment

MetaDefender Kiosk devices

Using the KIOSK devices in the local test environment. MetaDefender Core is installed on the same system as MetaDefender Kiosk.

Model	CPU	Memory (GB)	Disk type	OS
K1001 (Dell 7410)	Intel Core i9-13900 Cores: 24 Logical processors: 32 Base speed: 2.00 GHz	32	SSD	Windows 10 IoT Enterprise LTSC Version: 24H2
K1001 (Dell 7420)	Intel Core i9-14900 Cores: 24 Logical processors: 32 Base speed: 2.00 GHz	32	SSD	Windows 10 IoT Enterprise LTSC Version: 24H2
K2100	Intel Core i7-1260U Cores: 10 Logical processors: 12 Base speed: 1.10 GHz	32	SSD	Windows 10 IoT Enterprise LTSC Version: 24H2
K3001	Intel Core i9-12900 Cores: 16 Logical processors: 24 Base speed: 2.40 GHz	32	SSD	Windows 10 IoT Enterprise LTSC Version: 24H2

Storage Device

Using to store the dataset and connect to the Kiosk device: 128GB SanDisk USB 3.2 Gen 1

MFT Server

In case the MD Kiosk sends files to MD MFT after scanning, MD MFT is a virtual machine with the following specifications:

OS	vCPU	Memory (GB)	Disk type	Network bandwidth (Gbps)
Windows Server 2022	8	16	SSD	10 Gb Ethernet

Client

Using to run the Python script. The Client is a virtual machine with the following specifications:

OS	vCPU	Memory (GB)	Disk type	Network bandwidth (Gbps)
CentOS Linux 7.9	8	16	SSD	10 Gb Ethernet

3. Test flows

Flow 1: MD Kiosk sends CAB file to MD Core for scanning.
Flow 2: MD Kiosk sends Mixed dataset to MD Core (MAX AV engines) for scanning.
Flow 3: MD Kiosk sends Mixed dataset to MD Core (8 AV engines) for scanning.
Flow 4: MD Kiosk sends Mixed dataset to MD Core for scanning, and Allowed files are copied to MD MFT.

4. Dataset

CAB file:

Extracted files: 849 479
Total size of extracted files: 26.5 GB

Mixed dataset:

Summary (compressed):
- Number of files: 5000
- Total size: 7728.5 MB
- Average file size: 1.55 MB
Summary (extracted):
- Number of files: 5260
- Total size: 7759.5 MB
- Average file size: 1.48 MB
Largest file size: 24.7 MB
Smallest file size: 5 KB

File category	File type	Number of files	Total size (MB)	Average file size (MB)
Adobe	PDF	370	385 MB	1.0 MB
Executable	EXE	45	309.5 MB	6.9 MB
	MSI	15	45.75 MB	3.1 MB
Image	BMP	80	515 MB	6.4 MB
	JPG	420	237.5 MB	0.6 MB
	PNG	345	169 MB	0.5 MB
Media	MP3	135	865 MB	6.4 MB
	MP4	50	500 MB	10.0 MB
Office	DOCX	235	190 MB	0.8 MB
	DOC	225	486 MB	2.2 MB
	PPTX	365	860 MB	2.4 MB
	PPT	355	1950 MB	5.5 MB
	XLSX	340	283.5 MB	0.8 MB
	XLS	335	284.5 MB	0.8 MB
Text	CSV	100	236 MB	2.4 MB
	HTML	1075	76 MB	0.1 MB
	TXT	500	210 MB	0.4 MB
Archive	ZIP	Compressed files: 10 Extracted files: 270	Compressed size: 125.5 MB Extracted size: 156.5 MB	Avg compressed size: 12.6 MB Avg extracted size: 0.6 MB

5. MetaDefender Core settings

General settings

Turn off data retention
Turn off the engine update
Max size:
- File scan: 9999999999999 MB
- URL file download: 9999999999999 MB

Metascan

Enable engines depend on the testing package
Per AV engine scan: 1 min
Global scan: 10 mins
File download: 5 mins

Deep CDR

Enable engine
135 file types

Proactive DLP

Enable engine

Archive Extraction

Enable engine
Max recursive level: 99999999
Max number of files extracted: 99999999
Max total size of extracted files: 99999999
Timeout: 90 mins

Archive Compression

Enable engine

FileType

Enable engine
Timeout: 5 mins

File-Based Vulnerability Assessment

Enable engine

6. Test Summary

Flow 1: MD Kiosk sends CAB file to MD Core for scanning.

Device	Duration	Avg. CPU Usage	Avg. Memory Usage	Avg. Disk Speed (KB/s)	Throughput (objects/hour)	Throughput (objects/hour)
K1001 (Dell 7420)
K1001 (Dell 7420)	3 hours 27 minutes	50.4%	57.6%	Read: 2,451.8- Write: 17,118.4	246,659	0.3
K2100	8 hours 50 minutes	96.9%	57.1%	Read 1,048.7 - Write 6,559.3	96,106	0.1
K3001	4 hours 57 minutes	64.5%	58.0%	Read 2,936.1 - Write 10,873.3	171,772.5	0.2

Flow 2: MD Kiosk sends Mixed dataset to MD Core (MAX AV engines) for scanning.

Device	Duration	Avg. CPU Usage	Avg. Memory Usage	Avg. Disk Speed (KB/s)	Throughput (objects/hour)	Throughput (files/hour)
K1001 (Dell 7420)
K1001 (Dell 7420)	2 hours 21 minutes	53.2%	69.6%	Read: 5,759.6 - Write: 10,892.1	54,182.7	2,129.9
K2100	5 hours 46 minutes	94.1%	64.5%	Read 2,531.1 - Write 5,308.1	22,024,2	865.9
K3001	3 hours 1 minutes	69.0%	69.2%	Read 4,776.4 - Write 7,963.8	42,254.6	1,661.1

Flow 3: MD Kiosk sends Mixed dataset to MD Core (8 AV engines) for scanning.

Device	Duration	Avg. CPU Usage	Avg. Memory Usage	Avg. Disk Speed (KB/s)	Throughput (objects/hour)	Throughput (files/hour)
K1001 (Dell 7410)	31 minutes	40.9%	40.6%	Read 14,060.6 Write 17,329	247,576.4	9,729.7
K1001 (Dell 7420)	34 minutes	34.3%	39.6%	Read 9,663.6 Write 11,680.4	224,683.2	8,832.2
K2100	1 hour 22 minutes	86.0%	43.9%	Read 4,650.7 - Write 8,027.1	92,738.3	3,645.2
K3001	59 minutes	38.4%	38.1%	Read 6,403.2 - Write 9,053.2	130,441.2	5,128.2

Flow 4: MD Kiosk sends Mixed dataset to MD Core for scanning, and Allowed files are copied to MD MFT.

Device	Duration	Avg. CPU Usage	Avg. Memory Usage	Avg. Disk Speed (KB/s)	Avg. Network Speed (KB/s)	Throughput (objects/hour)	Throughput (files/hour)
K1001 (Dell 7420)
K1001 (Dell 7420)	1 hour 31 minutes	5.8%	34.6%	Read 5,468.1 Write 4,508	Receive 16.8 Send 1,738.3	348,242.1	3,313.1
K2100	1 hour 19 minutes	75.1%	45.6%	Read 8,155.9 - Write 10,649	Receive 8.8 - Send 1,538.7	102,461	3,786.3
K3001	50 minutes	12.1%	35%	Read 6,003.2 - Write 7,068.5	Receive 58 - Send 3,994.2	166,878.4	5,948.4

Last updated on

Was this page helpful?