topic is there any doc by Cisco in Web Security

WSA S670 slow browsing

Sakun Sharma — Mon, 23 Feb 2015 02:14:07 GMT

Hi,

We have C670 WSA in our environment. In morning when users connect even google.com takes 3 minutes to open.

I am running 7.7.0-760 OS on it.

At that moment:

CPU Usage - 10-15%

Web Proxy Usage - 95 - 100%

Transactions per seconds goes - 60 to 300

Connections out - 4500

when someone start some down it works perfect, opening any webpage take ages.

I have 11 custom URL filters with 15 Access Policies.

Any suggestion how to resolve this issue?

Regards,

Sakun Sharma

would recommend to upgrade

Handy Putra — Mon, 23 Feb 2015 06:58:12 GMT

would recommend to upgrade the AsyncOS to latest version 8.0 since version 7.7.0 there are few defects with performance issues.

is there any doc by Cisco

Sakun Sharma — Wed, 25 Feb 2015 02:23:39 GMT

is there any doc by Cisco listing out the performance issues with 7.7, as management need those docs before approving it quickly......

also is there anything is have to specifically careful while upgrading from 7.7 to 8.0, any major changes effecting the productivity?

Thanks

The Release Notes, page 4 of

Ken Stieers — Wed, 25 Feb 2015 20:46:36 GMT

The Release Notes, page 4 of this PDF:

http://www.cisco.com/c/dam/en/us/td/docs/security/wsa/wsa7-7/Release_Notes/WSA_7-7-0_FCS_Release_Notes.pdf

(They say S160/S360, but if you search in this forum, you'll find several others with the same issue. ) Not big gotcha's in 8.0...

From the PDF:

Pre-Upgrade Requirements

Note IMPORTANT: During testing of AsyncOS 7.7.0, Cisco observed performance changes ranging from + 33% to - 16%, depending on the model and configuration. Performance degradation risk is limited to S160 & S360 models and models S370 and S660 that are running the web proxy without security services. If you experience performance degradation with AsyncOS 7.7.0, Cisco recommends that you revert to AsyncOS 7.5.x.

Thank You guys...after

Sakun Sharma — Mon, 02 Mar 2015 03:47:59 GMT

Thank You guys...

after upgrade it seems working fine now. Web Proxy process remains 40 to 50% now and response time is really good.

Thank You all.