topic Re: FMC API too slow in Network Security

FMC API too slow

trial — Fri, 21 Feb 2020 17:54:23 GMT

Hi!

I am using a virtual FMC 6.4.0 in order to do a migration from ASA. As you know, once you migrate the ASA policy package it creates you a rule for each ACE which extremely increases the number of rules in the FMC (in my case up to 20.000 rules).

Ok, just for getting the same rule number than in the CSM of ASA (more or less 2000 rules), I have developed a python API script. But, the performance of the firepower management center API is very poor, for each response to put requests the FMC lasts up to 70 seconds.

Does anybody experience this poor performance?

Every vmware statistic seems normal: CPU usage, RAM usage...

Re: FMC API too slow

leejan1988 — Mon, 13 Jul 2020 20:35:58 GMT

Same experience. I am updating IPS policies on my FTD with 7000+ ACPs. FMC takes more than 30 seconds to update each IPS policy. i am also looking for a solution to speed it up...

Re: FMC API too slow

1_am_r00t — Tue, 09 May 2023 10:43:50 GMT

did you ever manger to fix the issue?

Re: FMC API too slow

leejan1988 — Tue, 09 May 2023 13:18:13 GMT

not yet. just wait for the response every time 😞

Re: FMC API too slow

1_am_r00t — Mon, 05 Jun 2023 09:30:42 GMT

I "fixed" the issue by doing an upgrade from 6.6.5.1 to 6.6.5.2. I think the issue was related to an error in one of the DB's of FMC. By doing the upgrade the tables somehow seem to have been repaired.