Our University IT is now requiring MacOS users to encrypt all storage devices.
What I found on the FM boards is the recommendation NOT to enable Filevault due to the performance hit, but no indication of the severity of the effect. The recommendation is indistinguishable from being part of a laundry list of generic recommendations to improve performance (get a fast drive, enough RAM etc).
Any experiences to help guide me here?
No metrics per se, perhaps other may chime in on that one, but I can share this...
...and specifically item 4 where we do not recommend that usage of FileVault.
but it was the lack of detail in that link that prompted me to post this....
I'm not sure about the performance hit by using FileVault. Do you have any other sensitive data on the FM Server besides the FileMaker files? If not, you can just turn on encryption at rest for the FileMaker files. My guess is that would be much less of a performance hit than encrypting the whole drive.
That is an option, but I'm not sure it will satisfy IT's checkbox...
lack of detail
Providing details is always going to be highly subjective, subject to a great many variables that may or may not apply to your deployment...
Some may come back and say "no impact" and some may come back to say "it's horrible" and neither may be relevant to your scenario.
And everything is in flux anyway so whatever you see today may not be the same in a few months as you add functionality to your solution.
You have FMI's recommendation, use that to push back. If they insist then make sure the recommendations are documented so that you can point back to it. I think that is a safer way than trying to base something on someone else's numbers.
I've used our internal Mac Mini Server (late 2012, 4 GB RAM, Yosemite) with FileVault and the performance is acceptable, however, the machine crawls when you try to do something else with it.
Macs with flash based storage running Filemaker pro and Filemaker Advanced perform at no performance difference in our database. Macs with traditional mechanical hard drives take a noticeable hit, but aren't unusable. I would certainly not enable filevault on fm server.