topic Re: 4120 ASA Throughput in Network Security

4120 ASA Throughput

WiLL-I-Am — Thu, 08 Oct 2020 19:14:54 GMT

Can you help me with this chart, what portion of the Appliance are they referring to by NGFW(next generation firewall), by NGFW I guess they mean FTD

So I mounted an ASA 9.12.3.12 on top of the FXOS(supervisor) 2.8(1.125), If I don't use the FTD or and deep packet inspection or URL filtering, can I get 60Gb throughput?

Re: 4120 ASA Throughput

Rob Ingram — Thu, 08 Oct 2020 19:12:49 GMT

Hi @WiLL-I-Am

If you intend on running ASA code on the FPR4120 then yes you'd get 60Gbps firewall throughput. If you run FTD code without NGFW features, then you get 60Gbps aswell.

FYI, you are referencing the wrong table for ASA capabilities, see "Table 2 - ASA performance and capabilities" further down the datasheet page...though the performance is still the same in this instance.

HTH

Re: 4120 ASA Throughput

WiLL-I-Am — Thu, 08 Oct 2020 19:23:19 GMT

Thanks

Can I do some levels of L7 inspection with just the ASA code and still get the same throughput?

Re: 4120 ASA Throughput

Rob Ingram — Thu, 08 Oct 2020 19:29:17 GMT

I doubt it, I'd imagine 30Gbps approx if you are statefully inspecting multiple protocols.

Re: 4120 ASA Throughput

WiLL-I-Am — Thu, 08 Oct 2020 19:33:24 GMT

so if I just inspect the torrent traffic we're good.