Performance measurement

1. Product Information

Product versions to be tested:

  • MetaDefender Kiosk 4.7.9.4229

  • MetaDefender Managed File Transfer 3.9.3.0

  • MetaDefender Core 5.15.1

  • Engines:

    • Metascan:

      • 20 AV engines package + Crowdstrike when testing with CAB file
      • MAX AV engines package when testing with mixed dataset
      • 8 AV engines package when testing with mixed dataset

    • Deep CDR: 7.5.1

    • Proactive DLP: 3.0.0

    • Archive: 7.5.1

    • FileType: 7.5.2

    • File-Based Vulnerability Assessment: 4.2.416.0

2. Environment

MetaDefender Kiosk devices

Using the KIOSK devices in the local test environment. MetaDefender Core is installed on the same system as MetaDefender Kiosk.

ModelCPUMemory (GB)Disk typeOS
K1001 (Dell 7410)

Intel Core i9-13900

Cores: 24

Logical processors: 32

Base speed: 2.00 GHz

32SSD

Windows 10 IoT Enterprise LTSC

Version: 21H2

K1001 (Dell 7420)

Intel Core i9-14900

Cores: 24

Logical processors: 32 Base speed: 2.00 GHz

32SSD

Windows 10 IoT Enterprise LTSC

Version: 21H2

K2100

Intel Core i7-1260U

Cores: 10

Logical processors: 12

Base speed: 1.10 GHz

32SSD

Windows 10 IoT Enterprise LTSC

Version: 21H2

K3001

Intel Core i9-12900

Cores: 16

Logical processors: 24

Base speed: 2.40 GHz

32SSD

Windows 10 IoT Enterprise LTSC

Version: 21H2

Storage Device

Using to store the dataset and connect to the Kiosk device: 128GB SanDisk USB 3.2 Gen 1

MFT Server

In case the MD Kiosk sends files to MD MFT after scanning, MD MFT is a virtual machine with the following specifications:

OSvCPUMemory (GB)Disk typeNetwork bandwidth (Gbps)
Windows Server 2022816SSD10 Gb Ethernet

Client

Using to run the Python script. The Client is a virtual machine with the following specifications:

OSvCPUMemory (GB)Disk typeNetwork bandwidth (Gbps)
CentOS Linux 7.9816SSD10 Gb Ethernet

3. Test flows

  • Flow 1: MD Kiosk sends CAB file to MD Core (21 AV engines) for scanning.
  • Flow 2: MD Kiosk sends Mixed dataset to MD Core (MAX AV engines) for scanning.
  • Flow 3: MD Kiosk sends Mixed dataset to MD Core (8 AV engines) for scanning.
  • Flow 4: MD Kiosk sends Mixed dataset to MD Core for scanning, and Allowed files are copied to MD MFT.

4. Dataset

CAB file:

  • Extracted files: 849 479
  • Total size of extracted files: 26.5 GB

Mixed dataset:

  • Summary (compressed):

    • Number of files: 5000
    • Total size: 7728.5 MB
    • Average file size: 1.55 MB

  • Summary (extracted):

    • Number of files: 5260
    • Total size: 7759.5 MB
    • Average file size: 1.48 MB

  • Largest file size: 24.7 MB

  • Smallest file size: 5 KB

File categoryFile typeNumber of filesTotal size (MB)Average file size (MB)
AdobePDF370385 MB1.0 MB
ExecutableEXE45309.5 MB6.9 MB
MSI1545.75 MB3.1 MB
ImageBMP80515 MB6.4 MB
JPG420237.5 MB0.6 MB
PNG345169 MB0.5 MB
MediaMP3135865 MB6.4 MB
MP450500 MB10.0 MB
OfficeDOCX235190 MB0.8 MB
DOC225486 MB2.2 MB
PPTX365860 MB2.4 MB
PPT3551950 MB5.5 MB
XLSX340283.5 MB0.8 MB
XLS335284.5 MB0.8 MB
TextCSV100236 MB2.4 MB
HTML107576 MB0.1 MB
TXT500210 MB0.4 MB
ArchiveZIP

Compressed files: 10

Extracted files: 270

Compressed size: 125.5 MB

Extracted size: 156.5 MB

Avg compressed size: 12.6 MB

Avg extracted size: 0.6 MB

5. MetaDefender Core settings

General settings

  • Turn off data retention
  • Turn off the engine update
  • Max size:
    • File scan: 9999999999999 MB
    • URL file download: 9999999999999 MB

Metascan

  • Enable engines depend on the testing package
  • Per AV engine scan: 1 min
  • Global scan: 10 mins
  • File download: 5 mins

Deep CDR

  • Enable engine
  • 135 file types

Proactive DLP

  • Enable engine

Archive Extraction

  • Enable engine
  • Max recursive level: 99999999
  • Max number of files extracted: 99999999
  • Max total size of extracted files: 99999999
  • Timeout: 90 mins

Archive Compression

  • Enable engine

FileType

  • Enable engine
  • Timeout: 5 mins

File-Based Vulnerability Assessment

  • Enable engine

6. Test Summary

Flow 1: MD Kiosk sends CAB file to MD Core (21 AV engines) for scanning.

DeviceDurationAvg. CPU UsageAvg. Memory UsageAvg. Disk Speed (KB/s)Throughput (objects/hour)Throughput (files/hour)
Kiosk Desktop (Dell Pro 24)3 hours 7 minutes57.1%62.5%Read 3,113.1 Write 17,313.7272,630.10.3
Kiosk Desktop (Dell 7420)3 hours and 56 minutes51.2%63.6%Read 2,546.5 Write 13,581.8216,132.20.3
Kiosk Mobile/Mini (Dell 7230)10 hours 23 minutes95%61.5%Read 978.6 Write 5,980.781,8290.1
Kiosk Tower (Dell 17S XE4)3 hours 59 minutes61.9%61.4%Read 1,796.9 Write 12,266.6213,043.90.3
Kiosk Tower (Dell 18S XE5)3 hours 3 minutes57.7%61.8%Read 2,298.8 Write 15,459.9278,286.50.3

Flow 2: MD Kiosk sends Mixed dataset to MD Core (MAX AV engines) for scanning.

DeviceDurationAvg. CPU UsageAvg. Memory UsageAvg. Disk Speed (KB/s)Throughput (objects/hour)Throughput (files/hour)
Kiosk Desktop (Dell Pro 24)2 hours and 16 minutes45.3%71.3%Read 5,223.5 Write 7,096.857,442.92,206.7
Kiosk Desktop (Dell 7420)2 hours and 25 minutes48.8%81.0%Read 4,973.2 Write 7,812.654,025.12,075.4
Kiosk Mobile/Mini (Dell 7230)5 hours 12 minutes95.6%74.5%Read 3,185.5 Write 4,352.225,051.5962.4
Kiosk Tower (Dell 17S XE4)2 hours 30 minutes62.5%76.1%Read 5,235.8 - Write 7,32752,199.82,005.1
Kiosk Tower (Dell 18S XE5)2 hours and 25 minutes41.176.5Read 4,988.9 Write 9,399.453,925.32,071.8

Flow 3: MD Kiosk sends Mixed dataset to MD Core (8 AV engines) for scanning.

DeviceDurationAvg. CPU UsageAvg. Memory UsageAvg. Disk Speed (KB/s)Throughput (objects/hour)Throughput (files/hour)
Kiosk Desktop (Dell Pro 24)52 minutes23.4%43.6%Read 7,590.2 Write 9,631.8150,280.95,772.9
Kiosk Desktop (Dell 7420)53 minutes27.7%43.0%Read 7,761.6 Write 8,864.5147,280.35,656.8
Kiosk Mobile/Mini (Dell 7230)1 hour 32 minutes73.3%42.3%Read 4,100.5 Write 6,444.185,643.23,249.7
Kiosk Tower (Dell 17S XE4)1 hour 1 minutes37.4%42.8%Read 6,545.4 Write 9,593.2129,9604,927.5
Kiosk Tower (Dell 18S XE5)1 hour 5 minutes18.3%41.7%Read 6,722.8 Write 8,156.8119,901.64,605.9

Flow 4: MD Kiosk sends Mixed dataset to MD Core for scanning, and Allowed files are copied to MD MFT.

DeviceDurationAvg. CPU UsageAvg. Memory UsageAvg. Disk Speed (KB/s)Avg. Network Speed (KB/s)Throughput (objects/hour)Throughput (files/hour)
Kiosk Desktop (Dell Pro 24)1 hour and 45 minutes6%34.7%Read 3,950.4 Write 3,558.5Receive 20.3 Send 1,049.5151,845.42,600
Kiosk Desktop (Dell 7420)
Kiosk Mobile/Mini (Dell 7230)1 hour 22 minutes36.1%30.5%Read 4,684.2 Write 5,756.4Receive 30.8 Send 1,705.6114,606.13,643.7
Kiosk Tower (Dell 17S XE4)1 hour 7 minutes13.6%32.0%Read 5,561.1 Write 7,621.6Receive 96.8 Send 2,130.4143,510.74,447.7
Kiosk Tower (Dell 18S XE5)57 minutes12.6%32.8%Read 7,316.2 Write 7,062.7Receive 114.8 Send 2,443.3173,595.95,260.1
Type to search, ESC to discard
Type to search, ESC to discard
Type to search, ESC to discard
Next to read:
Database password protection
On This Page
Performance measurement1. Product Information2. EnvironmentMetaDefender Kiosk devicesStorage DeviceMFT ServerClient3. Test flows4. Dataset5. MetaDefender Core settings6. Test SummaryFlow 1: MD Kiosk sends CAB file to MD Core (21 AV engines) for scanning.Flow 2: MD Kiosk sends Mixed dataset to MD Core (MAX AV engines) for scanning.Flow 3: MD Kiosk sends Mixed dataset to MD Core (8 AV engines) for scanning.Flow 4: MD Kiosk sends Mixed dataset to MD Core for scanning, and Allowed files are copied to MD MFT.