topic Re: ASA performance in Network Security https://community.cisco.com/t5/network-security/asa-performance/m-p/3918146#M24845 up ! Tue, 03 Sep 2019 12:51:32 GMT bgp.ripe901 2019-09-03T12:51:32Z ASA performance https://community.cisco.com/t5/network-security/asa-performance/m-p/3910011#M24842 <P>I use old good Cisco ASA 5550-failover clusters.</P><P>I dont understand its current throughput.</P><P>In Cisco datasheet info :&nbsp;Firewall Throughput Up to 1.2 Gbps ( 600 Mbps input + 600 Mbps output ) -&nbsp;right ?</P><P>&nbsp;</P><P>My config:</P><P>&nbsp;</P><P>Firewall mode: Transparent</P><P>&nbsp;</P><P>#</P><P>&nbsp;</P><P>&nbsp;</P><P>Interface&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IP-Address&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; OK? Method Status&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Protocol</P><P>INSIDE -&nbsp; GigabitEthernet0/0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 192.168.X.X&nbsp;&nbsp; YES unset&nbsp; up&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; up</P><P>OUTSIDE - GigabitEthernet0/1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 192.168.X.X&nbsp;&nbsp; YES unset&nbsp; up&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; up</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>Name: "Chassis", DESCR: "ASA 5550 Adaptive Security Appliance"</P><P>PID: ASA5550&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; , VID: V03&nbsp;&nbsp;&nbsp;&nbsp; , SN: JMX1236L00E</P><P>&nbsp;</P><P>Name: "module 1", DESCR: "SSM-4GE Included with ASA 5550 System"</P><P>PID: SSM-4GE-INC&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; , VID: V01&nbsp;&nbsp;&nbsp;&nbsp; , SN: JAF1234B0W8</P><P>&nbsp;</P><P>&nbsp;</P><P>#####</P><P>&nbsp;</P><P>&nbsp;</P><P># sh cpu usa</P><P>CPU utilization for 5 seconds = 36%; 1 minute: 36%; 5 minutes: 36%</P><P>&nbsp;</P><P>###</P><P>&nbsp;</P><P>&nbsp;</P><P>sh traffic:</P><P>&nbsp;</P><P>----------------------------------------</P><P>Aggregated Traffic on Physical Interface</P><P>----------------------------------------</P><P>GigabitEthernet0/0:</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; received (in 1801375.604 secs):</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 805660900387 packets&nbsp;&nbsp;&nbsp; 355364897024411 bytes</P><P><STRONG>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 447002 pkts/sec 197274002 bytes/sec</STRONG></P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; transmitted (in 1801375.604 secs):</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 576374398668 packets&nbsp;&nbsp;&nbsp; 376866908006068 bytes</P><P><STRONG>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;319000 pkts/sec 209210000 bytes/sec</STRONG></P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1 minute input rate 46173 pkts/sec,&nbsp; 18107318 bytes/sec</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1 minute output rate 32510 pkts/sec,&nbsp; 21946705 bytes/sec</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1 minute drop rate, 0 pkts/sec</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 5 minute input rate 46845 pkts/sec,&nbsp; 18901365 bytes/sec</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 5 minute output rate 30565 pkts/sec,&nbsp; 20583337 bytes/sec</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 5 minute drop rate, 0 pkts/sec</P><P>&nbsp;</P><P>GigabitEthernet0/1:</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; received (in 1801375.604 secs):</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 577193079700 packets&nbsp;&nbsp;&nbsp; 376999829201163 bytes</P><P><STRONG>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 320000 pkts/sec 209284001 bytes/sec</STRONG></P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; transmitted (in 1801375.604 secs):</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 791192310741 packets&nbsp;&nbsp;&nbsp; 351475788699197 bytes</P><P><STRONG>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 439001 pkts/sec 195115000 bytes/sec</STRONG></P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1 minute input rate 32508 pkts/sec,&nbsp; 21946738 bytes/sec</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1 minute output rate 44958 pkts/sec,&nbsp; 17803992 bytes/sec</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1 minute drop rate, 0 pkts/sec</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 5 minute input rate 30568 pkts/sec,&nbsp; 20583786 bytes/sec</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 5 minute output rate 45461 pkts/sec,&nbsp; 18545830 bytes/sec</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 5 minute drop rate, 0 pkts/sec</P><P>&nbsp;</P><P>&nbsp;</P><P>----------------------------------------</P><P>Per Slot Throughput Profile (1 minute)</P><P>----------------------------------------</P><P>&nbsp; Packets-per-second profile:</P><P>&nbsp;&nbsp;&nbsp; Slot 0:&nbsp;&nbsp;&nbsp;&nbsp; 156424 100%|**************************************************</P><P>&nbsp; &nbsp;&nbsp;Slot 1:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp; 0%|</P><P>&nbsp;</P><P>&nbsp; Bytes-per-second profile:</P><P>&nbsp;&nbsp;&nbsp; Slot 0:&nbsp;&nbsp; 80117120 100%|**************************************************</P><P>&nbsp;&nbsp;&nbsp; Slot 1:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp; 0%|</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>Total summary:</P><P>&nbsp;</P><P>Received:</P><P>&nbsp;</P><P>197274002 bytes/sec</P><P>209284001 bytes/sec</P><P>&nbsp;</P><P>Total: 406558003 x 8 / 1024 x 1024 = 3252464024 ~ 3.225 Mbit/s</P><P>&nbsp;</P><P>&nbsp;</P><P>transmitted:</P><P>&nbsp;</P><P>209210000 bytes/sec</P><P>195115000 bytes/sec</P><P>&nbsp;</P><P>Total: 404325000 x 8 / 1024 x 1024 = 3234600000 ~ 3.234 Mbit/s</P><P>&nbsp;</P> Mon, 19 Aug 2019 07:43:10 GMT https://community.cisco.com/t5/network-security/asa-performance/m-p/3910011#M24842 bgp.ripe901 2019-08-19T07:43:10Z Re: ASA performance https://community.cisco.com/t5/network-security/asa-performance/m-p/3918146#M24845 up ! Tue, 03 Sep 2019 12:51:32 GMT https://community.cisco.com/t5/network-security/asa-performance/m-p/3918146#M24845 bgp.ripe901 2019-09-03T12:51:32Z