Performance measurement

1. Product Information

Product versions to be tested:

  • MetaDefender Kiosk 4.7.8.3994

  • MetaDefender Managed File Transfer 3.9.3.0

  • MetaDefender Core 5.15.0

  • Engines:

    • Metascan:

      • 20 AV engines package + Crowdstrike when testing with CAB file

      • MAX AV engines package when testing with mixed dataset

      • 8 AV engines package when testing with mixed dataset

    • Deep CDR: 7.5.0

    • Proactive DLP: 3.0.0

    • Archive: 7.5.0

    • FileType: 7.5.1

    • File-Based Vulnerability Assessment: 4.2.416.0

2. Environment

MetaDefender Kiosk devices

Using the KIOSK devices in the local test environment. MetaDefender Core is installed on the same system as MetaDefender Kiosk.

Model

CPU

Memory (GB)

Disk type

OS

K1001 (Dell 7410)

Intel Core i9-13900

Cores: 24

Logical processors: 32

Base speed: 2.00 GHz

32

SSD

Windows 10 IoT Enterprise LTSC

Version: 21H2

K1001 (Dell 7420)

Intel Core i9-14900

Cores: 24

Logical processors: 32 Base speed: 2.00 GHz

32

SSD

Windows 10 IoT Enterprise LTSC

Version: 21H2

K2100

Intel Core i7-1260U

Cores: 10

Logical processors: 12

Base speed: 1.10 GHz

32

SSD

Windows 10 IoT Enterprise LTSC

Version: 21H2

K3001

Intel Core i9-12900

Cores: 16

Logical processors: 24

Base speed: 2.40 GHz

32

SSD

Windows 10 IoT Enterprise LTSC

Version: 21H2

Storage Device

Using to store the dataset and connect to the Kiosk device: 128GB SanDisk USB 3.2 Gen 1

MFT Server

In case the MD Kiosk sends files to MD MFT after scanning, MD MFT is a virtual machine with the following specifications:

OS

vCPU

Memory (GB)

Disk type

Network bandwidth (Gbps)

Windows Server 2022

8

16

SSD

10 Gb Ethernet

Client

Using to run the Python script. The Client is a virtual machine with the following specifications:

OS

vCPU

Memory (GB)

Disk type

Network bandwidth (Gbps)

CentOS Linux 7.9

8

16

SSD

10 Gb Ethernet

3. Test flows

  • Flow 1: MD Kiosk sends CAB file to MD Core (21 AV engines) for scanning.

  • Flow 2: MD Kiosk sends Mixed dataset to MD Core (MAX AV engines) for scanning.

  • Flow 3: MD Kiosk sends Mixed dataset to MD Core (8 AV engines) for scanning.

  • Flow 4: MD Kiosk sends Mixed dataset to MD Core for scanning, and Allowed files are copied to MD MFT.

4. Dataset

CAB file:

  • Extracted files: 849 479

  • Total size of extracted files: 26.5 GB

Mixed dataset:

  • Summary (compressed):

    • Number of files: 5000

    • Total size: 7728.5 MB

    • Average file size: 1.55 MB

  • Summary (extracted):

    • Number of files: 5260

    • Total size: 7759.5 MB

    • Average file size: 1.48 MB

  • Largest file size: 24.7 MB

  • Smallest file size: 5 KB

File category

File type

Number of files

Total size (MB)

Average file size (MB)

Adobe

PDF

370

385 MB

1.0 MB

Executable

EXE

45

309.5 MB

6.9 MB


MSI

15

45.75 MB

3.1 MB

Image

BMP

80

515 MB

6.4 MB


JPG

420

237.5 MB

0.6 MB


PNG

345

169 MB

0.5 MB

Media

MP3

135

865 MB

6.4 MB


MP4

50

500 MB

10.0 MB

Office

DOCX

235

190 MB

0.8 MB


DOC

225

486 MB

2.2 MB


PPTX

365

860 MB

2.4 MB


PPT

355

1950 MB

5.5 MB


XLSX

340

283.5 MB

0.8 MB


XLS

335

284.5 MB

0.8 MB

Text

CSV

100

236 MB

2.4 MB


HTML

1075

76 MB

0.1 MB


TXT

500

210 MB

0.4 MB

Archive

ZIP

Compressed files: 10

Extracted files: 270

Compressed size: 125.5 MB

Extracted size: 156.5 MB

Avg compressed size: 12.6 MB

Avg extracted size: 0.6 MB

5. MetaDefender Core settings

General settings

  • Turn off data retention

  • Turn off the engine update

  • Max size:

    • File scan: 9999999999999 MB

    • URL file download: 9999999999999 MB

Metascan

  • Enable engines depend on the testing package

  • Per AV engine scan: 1 min

  • Global scan: 10 mins

  • File download: 5 mins

Deep CDR

  • Enable engine

  • 135 file types

Proactive DLP

  • Enable engine

Archive Extraction

  • Enable engine

  • Max recursive level: 99999999

  • Max number of files extracted: 99999999

  • Max total size of extracted files: 99999999

  • Timeout: 90 mins

Archive Compression

  • Enable engine

FileType

  • Enable engine

  • Timeout: 5 mins

File-Based Vulnerability Assessment

  • Enable engine

6. Test Summary

Flow 1: MD Kiosk sends CAB file to MD Core (21 AV engines) for scanning.

Device

Duration

Avg. CPU Usage

Avg. Memory Usage

Avg. Disk Speed (KB/s)

Throughput (objects/hour)

Throughput (files/hour)

Kiosk Desktop (Dell 7420)

3 hours and 27 minutes

46.4%

61.8%

Read 2,855.8 Write 14,135.1

246,232.3

0.3

Kiosk Desktop (Dell Pro 24)

3 hours

58.4%

63.0%

Read 2,577.6 Write 16,037.1

329,556.7

0.3

Kiosk Mobile/Mini (Dell 7230)

9 hours 56 minutes

94.4%

52.3%

Read 808.9 Write 5,942.3

85,520

0.1

Kiosk Tower (Dell 17S XE4)

3 hours 56 minutes

59.7%

61.6%

Read 1,897.1 Write 14,183.6

222,847.5

0.3

Flow 2: MD Kiosk sends Mixed dataset to MD Core (MAX AV engines) for scanning.

Device

Duration

Avg. CPU Usage

Avg. Memory Usage

Avg. Disk Speed (KB/s)

Throughput (objects/hour)

Throughput (files/hour)

Kiosk Desktop (Dell 7420)

2 hours and 21 minutes

49.2%

71.8%

Read 5,302.8 Write 6,856.6

55,347.4

1.693

Kiosk Desktop (Dell Pro 24)

2 hours and 15 minutes

47.8%

75.0%

Read 5,606.3 Write 7,221.4

57,950.2

2,226.3

Kiosk Mobile/Mini (Dell 7230)

5 hours 15 minutes

94.3%

60.1%

Read 2,170.9 Write 4,143.6

24,764

951.4

Kiosk Tower (Dell 17S XE4)

2 hours 26 minutes

61.5%

72.3%

Read 5,770 Write 7,001.2

53,663.7

2,061.4

Flow 3: MD Kiosk sends Mixed dataset to MD Core (8 AV engines) for scanning.

Device

Duration

Avg. CPU Usage

Avg. Memory Usage

Avg. Disk Speed (KB/s)

Throughput (objects/hour)

Throughput (files/hour)

Kiosk Desktop (Dell 7420)

56 minutes

28.7%

42.2%

Read 7,557 Write 10,145.2

138,819.8

5,333.3

Kiosk Desktop (Dell Pro 24)

51 minutes

24.7%

42.5%

Read 7,337.8 Write 9,348.6

167,419.2

5,863.2

Kiosk Mobile/Mini (Dell 7230)

1 hour 36 minutes

71.9%

39.6%

Read 4,195.9 Write 6,610.7

81,001.7

3,111.5

Kiosk Tower (Dell 17S XE4)

52 minutes

32.7%

41.8%

Read 7,242.8 Write 10,545

151,525.7

5,821.5

Flow 4: MD Kiosk sends Mixed dataset to MD Core for scanning, and Allowed files are copied to MD MFT.

Device

Duration

Avg. CPU Usage

Avg. Memory Usage

Avg. Disk Speed (KB/s)

Avg. Network Speed (KB/s)

Throughput (objects/hour)

Throughput (files/hour)

Kiosk Desktop (Dell 7420)

1 hour 23 minutes

16.9%

44.6%

Read 4,767.6 Write 4,479.7

Receive 12.2 Send 1,645.5

213,096.7

3,611.6

Kiosk Desktop (Dell Pro 24)

1 hour and 40 minutes

7.0%

32.5%

Read 4,417.4 Write 4,348.76

Receive 27 Send 1,398.2

165,829.2

2,993.5

Kiosk Mobile/Mini (Dell 7230)

1 hour 18 minutes

38.3%

28.1%

Read 4,930.3 Write 8,521.3

Receive 27.5 Send 1,769.7

120,420.3

3,863.5

Kiosk Tower (Dell 17S XE4)

1 hour 2 minutes

11.2%

32.5%

Read 5,148.7 Write 7,479

Receive 78.5 Send 2,021.5

174,025.3

4,838.7