Performance measurement

1. Product Information

Product versions to be tested:

MetaDefender Kiosk 4.7.6.3472
MetaDefender Managed File Transfer 3.8.0
MetaDefender Core 5.14.1
Engines:
- Metascan:
  - 20 AV engines package + Crowdstrike when testing with CAB file
  - MAX AV engines package when testing with mixed dataset
  - 8 AV engines package when testing with mixed dataset
- Deep CDR: 7.4.1
- Proactive DLP: 2.23.1
- Archive: 7.4.1
- FileType: 7.4.2
- File-Based Vulnerability Assessment: 4.2.416.0

2. Environment

MetaDefender Kiosk devices

Using the KIOSK devices in the local test environment. MetaDefender Core is installed on the same system as MetaDefender Kiosk.

Model	CPU	Memory (GB)	Disk type	OS
K1001 (Dell 7410)	Intel Core i9-13900 Cores: 24 Logical processors: 32 Base speed: 2.00 GHz	32	SSD	Windows 10 IoT Enterprise LTSC Version: 21H2
K1001 (Dell 7420)	Intel Core i9-14900 Cores: 24 Logical processors: 32 Base speed: 2.00 GHz	32	SSD	Windows 10 IoT Enterprise LTSC Version: 21H2
K2100	Intel Core i7-1260U Cores: 10 Logical processors: 12 Base speed: 1.10 GHz	32	SSD	Windows 10 IoT Enterprise LTSC Version: 21H2
K3001	Intel Core i9-12900 Cores: 16 Logical processors: 24 Base speed: 2.40 GHz	32	SSD	Windows 10 IoT Enterprise LTSC Version: 21H2

Storage Device

Using to store the dataset and connect to the Kiosk device: 128GB SanDisk USB 3.2 Gen 1

MFT Server

In case the MD Kiosk sends files to MD MFT after scanning, MD MFT is a virtual machine with the following specifications:

OS	vCPU	Memory (GB)	Disk type	Network bandwidth (Gbps)
Windows Server 2022	8	16	SSD	10 Gb Ethernet

Client

Using to run the Python script. The Client is a virtual machine with the following specifications:

OS	vCPU	Memory (GB)	Disk type	Network bandwidth (Gbps)
CentOS Linux 7.9	8	16	SSD	10 Gb Ethernet

3. Test flows

Flow 1: MD Kiosk sends CAB file to MD Core (21 AV engines) for scanning.
Flow 2: MD Kiosk sends Mixed dataset to MD Core (MAX AV engines) for scanning.
Flow 3: MD Kiosk sends Mixed dataset to MD Core (8 AV engines) for scanning.
Flow 4: MD Kiosk sends Mixed dataset to MD Core for scanning, and Allowed files are copied to MD MFT.

4. Dataset

CAB file:

Extracted files: 849 479
Total size of extracted files: 26.5 GB

Mixed dataset:

Summary (compressed):
- Number of files: 5000
- Total size: 7728.5 MB
- Average file size: 1.55 MB
Summary (extracted):
- Number of files: 5260
- Total size: 7759.5 MB
- Average file size: 1.48 MB
Largest file size: 24.7 MB
Smallest file size: 5 KB

File category	File type	Number of files	Total size (MB)	Average file size (MB)
Adobe	PDF	370	385 MB	1.0 MB
Executable	EXE	45	309.5 MB	6.9 MB
	MSI	15	45.75 MB	3.1 MB
Image	BMP	80	515 MB	6.4 MB
	JPG	420	237.5 MB	0.6 MB
	PNG	345	169 MB	0.5 MB
Media	MP3	135	865 MB	6.4 MB
	MP4	50	500 MB	10.0 MB
Office	DOCX	235	190 MB	0.8 MB
	DOC	225	486 MB	2.2 MB
	PPTX	365	860 MB	2.4 MB
	PPT	355	1950 MB	5.5 MB
	XLSX	340	283.5 MB	0.8 MB
	XLS	335	284.5 MB	0.8 MB
Text	CSV	100	236 MB	2.4 MB
	HTML	1075	76 MB	0.1 MB
	TXT	500	210 MB	0.4 MB
Archive	ZIP	Compressed files: 10 Extracted files: 270	Compressed size: 125.5 MB Extracted size: 156.5 MB	Avg compressed size: 12.6 MB Avg extracted size: 0.6 MB

5. MetaDefender Core settings

General settings

Turn off data retention
Turn off the engine update
Max size:
- File scan: 9999999999999 MB
- URL file download: 9999999999999 MB

Metascan

Enable engines depend on the testing package
Per AV engine scan: 1 min
Global scan: 10 mins
File download: 5 mins

Deep CDR

Enable engine
135 file types

Proactive DLP

Enable engine

Archive Extraction

Enable engine
Max recursive level: 99999999
Max number of files extracted: 99999999
Max total size of extracted files: 99999999
Timeout: 90 mins

Archive Compression

Enable engine

FileType

Enable engine
Timeout: 5 mins

File-Based Vulnerability Assessment

Enable engine

6. Test Summary

Info

Due to a technical issue, the scan results for K1002 (Dell 7420) will be based on the previous results obtained with Core 5.13.0 and Kiosk 4.7.3.

Flow 1: MD Kiosk sends CAB file to MD Core (21 AV engines) for scanning.

Device	Duration	Avg. CPU Usage	Avg. Memory Usage	Avg. Disk Speed (KB/s)	Throughput (objects/hour)	Throughput (files/hour)
K1001 (Dell 7410)
K1002 (Dell 7420)	4 hours 37 minutes	60.7%	65.2%	Read: 2,356.4- Write: 11,376.8	183,695.8	0.2
K2100	7 hours 44 minutes	96.8%	53.5%	Read 1,372.8 - Write 7,657.2	114,714.3	0.1
K3001	4 hours 37 minutes	70.5%	62.0%	Read 2,182.4 - Write 13,945.2	183,388	0.2

Flow 2: MD Kiosk sends Mixed dataset to MD Core (MAX AV engines) for scanning.

Device	Duration	Avg. CPU Usage	Avg. Memory Usage	Avg. Disk Speed (KB/s)	Throughput (objects/hour)	Throughput (files/hour)
K1001 (Dell 7410)
K1001 (Dell 7420)	3 hours 4 minutes	55.8%	73.8%	Read: 4,438.8 Write: 6,343	41,415.3	1,628.2
K2100	4 hours 56 minutes	92.2%	69.7%	Read 4,067 - Write 5,195.7	25,819.4	1,015.1
K3001	3 hours 8 minutes	72.2%	68.2%	Read 4,429.3 - Write 7,877.9	40,607.7	1,596.5

Flow 3: MD Kiosk sends Mixed dataset to MD Core (8 AV engines) for scanning.

Device	Duration	Avg. CPU Usage	Avg. Memory Usage	Avg. Disk Speed (KB/s)	Throughput (objects/hour)	Throughput (files/hour)
K1001 (Dell 7410)	40 minutes	30.4%	41.9%	Read 8,950 Write 12,450.9	189,102.6	7,434.9
K1001 (Dell 7420)	1 hour 2 minutes	47.9%	46.9%	Read 5,579.9 Write 8,545.8	122,734.2	4,823.2
K2100	1 hour 19 minutes	73.8%	40.3%	Read 4,373 - Write 7,135.6	96,001.1	3,774.4
K3001	58 minutes	52.2%	42.7%	Read 6,698.8 - Write 10,216	132,265	5,199.3

Flow 4: MD Kiosk sends Mixed dataset to MD Core for scanning, and Allowed files are copied to MD MFT.

Device	Duration	Avg. CPU Usage	Avg. Memory Usage	Avg. Disk Speed (KB/s)	Avg. Network Speed (KB/s)	Throughput (objects/hour)	Throughput (files/hour)
K1001 (Dell 7410)
K1001 (Dell 7420)	1 hour 23 minutes	16.9%	44.6%	Read 4,767.6 Write 4,479.7	Receive 12.2 Send 1,645.5	213,096.7	3,611.6
K2100	49 minutes	42.1%	35.5%	Read 13,000.5 - Write 8,706.4	Receive 17.4 - Send 3,132.5	174,832	6,130.8
K3001	35 minutes	25.8%	39.1%	Read 7,807 - Write 7,864.6	Receive 35.9 - Send 2,167.6	247,273	8,506.6

Last updated on

Was this page helpful?