I am setting up a network monitoring device which recommends that I create a mirror interface on my firewall/security appliance and send all packets to the monitor for sniffing, logging, and correlation.
The device in question is a SonicWall TZ600, which can't currently handle the full 1Gbps WAN connection that it has. Traffic is slowed to around 800Mbps with the scanning features turned on.
I have read that port mirroring doesn't affect switch performance.
My question is if the additional load of setting up a mirror on this strained firewall will further constrict it's performance?