Hacker News Reader

With NSS Labs shutting down today the need for objectivity and visibility into testing has never been greater.

I know no one cares about NSS Labs but as an employee of a NSS-tested company I'd like to say RIP. No one does testing as rigorously as you, and thanks for all the headaches you've caused my teams.

(Gartner is a joke. There, I said it.)

:) Same here

NSS labs was one of the few labs which actually did rigorous testing in regards to firewall performance. It helped me and my company enourmously with both recommending solutions to customers aswell as troubleshooting. Mainly by providing a truthfull baseline compared to the datasheet of the vendor. all firewall vendors seem to basically lie on their datasheet in regards to real life performance. This becomes a real pain in the arse when you start seeing performance issues or weird behaviour because you actually run a firewall "to spec".

a good example of this was a cisco asa with firepower (which in itself ia a terrible solution, but alas). even at "just" 50% of the specced load, we started seeing weird issues in regards to IPsec tunnels. (SA's randomly dropping, getting abysmal performance at certain times etc).

Reply on news.ycombinator.com