Performance measurement

1. Product Information

Product versions to be tested:

  • MetaDefender Kiosk 4.7.4

  • MetaDefender Managed File Transfer 3.8.0

  • MetaDefender Core 5.13.2

  • Engines:

    • Metascan:

      • 20 AV engines package + Crowdstrike when testing with CAB file
      • MAX AV engines package when testing with mixed dataset
      • 8 AV engines package when testing with mixed dataset

    • Deep CDR: 7.3.2

    • Proactive DLP: 2.22.1

    • Archive: 7.3.2

    • FileType: 7.3.1

    • File-Based Vulnerability Assessment: 4.2.416.0

2. Environment

MetaDefender Kiosk devices

Using the KIOSK devices in the local test environment. MetaDefender Core is installed on the same system as MetaDefender Kiosk.

ModelCPUMemory (GB)Disk typeOS
K1001 (Dell 7410)

Intel Core i9-13900

Cores: 24

Logical processors: 32

Base speed: 2.00 GHz

32SSD

Windows 10 IoT Enterprise LTSC

Version: 21H2

K1001 (Dell 7420)

Intel Core i9-14900

Cores: 24

Logical processors: 32 Base speed: 2.00 GHz

32SSD

Windows 10 IoT Enterprise LTSC

Version: 21H2

K2100

Intel Core i7-1260U

Cores: 10

Logical processors: 12

Base speed: 1.10 GHz

32SSD

Windows 10 IoT Enterprise LTSC

Version: 21H2

K3001

Intel Core i9-12900

Cores: 16

Logical processors: 24

Base speed: 2.40 GHz

32SSD

Windows 10 IoT Enterprise LTSC

Version: 21H2

Storage Device

Using to store the dataset and connect to the Kiosk device: 128GB SanDisk USB 3.2 Gen 1

MFT Server

In case the MD Kiosk sends files to MD MFT after scanning, MD MFT is a virtual machine with the following specifications:

OSvCPUMemory (GB)Disk typeNetwork bandwidth (Gbps)
Windows Server 2022816SSD10 Gb Ethernet

Client

Using to run the Python script. The Client is a virtual machine with the following specifications:

OSvCPUMemory (GB)Disk typeNetwork bandwidth (Gbps)
CentOS Linux 7.9816SSD10 Gb Ethernet

3. Test flows

  • Flow 1: MD Kiosk sends CAB file to MD Core (21 AV engines) for scanning.
  • Flow 2: MD Kiosk sends Mixed dataset to MD Core (MAX AV engines) for scanning.
  • Flow 3: MD Kiosk sends Mixed dataset to MD Core (8 AV engines) for scanning.
  • Flow 4: MD Kiosk sends Mixed dataset to MD Core for scanning, and Allowed files are copied to MD MFT.

4. Dataset

CAB file:

  • Extracted files: 849 479
  • Total size of extracted files: 26.5 GB

Mixed dataset:

  • Summary (compressed):

    • Number of files: 5000
    • Total size: 7728.5 MB
    • Average file size: 1.55 MB

  • Summary (extracted):

    • Number of files: 5260
    • Total size: 7759.5 MB
    • Average file size: 1.48 MB

  • Largest file size: 24.7 MB

  • Smallest file size: 5 KB

File categoryFile typeNumber of filesTotal size (MB)Average file size (MB)
AdobePDF370385 MB1.0 MB
ExecutableEXE45309.5 MB6.9 MB
MSI1545.75 MB3.1 MB
ImageBMP80515 MB6.4 MB
JPG420237.5 MB0.6 MB
PNG345169 MB0.5 MB
MediaMP3135865 MB6.4 MB
MP450500 MB10.0 MB
OfficeDOCX235190 MB0.8 MB
DOC225486 MB2.2 MB
PPTX365860 MB2.4 MB
PPT3551950 MB5.5 MB
XLSX340283.5 MB0.8 MB
XLS335284.5 MB0.8 MB
TextCSV100236 MB2.4 MB
HTML107576 MB0.1 MB
TXT500210 MB0.4 MB
ArchiveZIP

Compressed files: 10

Extracted files: 270

Compressed size: 125.5 MB

Extracted size: 156.5 MB

Avg compressed size: 12.6 MB

Avg extracted size: 0.6 MB

5. MetaDefender Core settings

General settings

  • Turn off data retention
  • Turn off the engine update
  • Max size:
    • File scan: 9999999999999 MB
    • URL file download: 9999999999999 MB

Metascan

  • Enable engines depend on the testing package
  • Per AV engine scan: 1 min
  • Global scan: 10 mins
  • File download: 5 mins

Deep CDR

  • Enable engine
  • 135 file types

Proactive DLP

  • Enable engine

Archive Extraction

  • Enable engine
  • Max recursive level: 99999999
  • Max number of files extracted: 99999999
  • Max total size of extracted files: 99999999
  • Timeout: 90 mins

Archive Compression

  • Enable engine

FileType

  • Enable engine
  • Timeout: 5 mins

File-Based Vulnerability Assessment

  • Enable engine

6. Test Summary

Due to a technical issue, the scan results for K1002 (Dell 7420) will be based on the previous results obtained with Core 5.13.0 and Kiosk 4.7.3.

Flow 1: MD Kiosk sends CAB file to MD Core (21 AV engines) for scanning.

DeviceDurationAvg. CPU UsageAvg. Memory UsageAvg. Disk Speed (KB/s)Throughput (objects/hour)Throughput (objects/hour)

K1001

(Dell 7410)

K1002 (Dell 7420)3 hours 27 minutes50.4%57.6%Read: 2,451.8 Write: 17,118.4246,6590.3
K21007 hours 47 minutes96.9%50.4%Read 1,100.4 Write 7,394.7109,203.30.1
K30014 hours 9 minutes66.4%59.8%Read 7,394.7 Write 13,905.3204,3320.2

Flow 2: MD Kiosk sends Mixed dataset to MD Core (MAX AV engines) for scanning.

DeviceDurationAvg. CPU UsageAvg. Memory UsageAvg. Disk Speed (KB/s)Throughput (objects/hour)Throughput (files/hour)
K1001 (Dell 7410)
K1001 (Dell 7420)2 hours 21 minutes53.2%69.6%Read: 5,759.6 Write: 10,892.154,182.72,129.9
K21004 hours 29 minutes91.7%72.8%Read 3,139.1 Write 5,925.428,333.53.232
K30012 hours 44 minutes65.9%65.2%Read 4,610.4 Write 9,512.746,548.81,830

Flow 3: MD Kiosk sends Mixed dataset to MD Core (8 AV engines) for scanning.

DeviceDurationAvg. CPU UsageAvg. Memory UsageAvg. Disk Speed (KB/s)Throughput (objects/hour)Throughput (files/hour)

K1001

(Dell 7410)

29 minutes43.5%41.3%Read 13,922.7 Write 17,396.9262,567.310,321.1
K1001 (Dell 7420)34 minutes34.3%39.6%Read 9,663.6 Write 11,680.4224,683.28,832.2
K21001 hour 4 minutes82.6%43.9%Read 4,870.1 Write 8,976118,780.64,669.3
K300144 minutes55.2%42.9%Read 7,695.7 Write 11,441.7174,813.10.524

Flow 4: MD Kiosk sends Mixed dataset to MD Core for scanning, and Allowed files are copied to MD MFT.

DeviceDurationAvg. CPU UsageAvg. Memory UsageAvg. Disk Speed (KB/s)Avg. Network Speed (KB/s)Throughput (objects/hour)Throughput (files/hour)

K1001

(Dell 7410)

K1001 (Dell 7420)20 minutes59.6%36.7%Read 28,855.8 Write 45,143.1Receive 40.3 Send 6,737.9534,171.115,000
K210026 minutes74.6%39.3%Read 29,596.1 Write 14,730Receive 36.6 Send 6,433.2363,013.711,531.1
K300119 minutes46.4%38.4%Read 18,487.4 Write 13,605Receive 103.1 Send 7,027.3719,594.516,071.4
Type to search, ESC to discard
Type to search, ESC to discard
Type to search, ESC to discard
Next to read:
Database password protection
On This Page
Performance measurement1. Product Information2. EnvironmentMetaDefender Kiosk devicesStorage DeviceMFT ServerClient3. Test flows4. Dataset5. MetaDefender Core settings6. Test SummaryFlow 1: MD Kiosk sends CAB file to MD Core (21 AV engines) for scanning.Flow 2: MD Kiosk sends Mixed dataset to MD Core (MAX AV engines) for scanning.Flow 3: MD Kiosk sends Mixed dataset to MD Core (8 AV engines) for scanning.Flow 4: MD Kiosk sends Mixed dataset to MD Core for scanning, and Allowed files are copied to MD MFT.