topic FWSM - Low throughput and connection Speed in Network Security

FWSM - Low throughput and connection Speed

Martin Marino — Tue, 12 Mar 2019 03:29:07 GMT

Hi,

I have two FWSM's modules running in two 6500 as an active/passive pair. THe problem is that we're experiencing low throughput in some connections (about only 10Mbps).

I've been doing some research and I found that ASA does TCP coalescing and in case of packet loss or out of order packets this could lower down the throughput even more. So i would like to disable the TCP coalescing to test but i cannot find how to do it.

If anyone has any idea it will be really welcomed

Here is a link that talks about TCP coalescing:

http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a0080ba9521.shtml

Thanks!

Martin

FWSM - Low throughput and connection Speed

Julio Carvajal — Mon, 13 Jan 2014 18:45:03 GMT

Hello Martin,

A packet-Capture will be needed to determine the real cause of the problem.

What we are talking here about is the TCP normalizer which makes the FW such a great Firewall option on the market because of all the things it does.

You could try the TCP state bypass feature on the FW for the traffic suffering to see if it does make a difference (It should, less checks for the normalization)

Looking for some Networking Assistance?
Contact me directly at jcarvaja@laguiadelnetworking.com

I will fix your problem ASAP.

Cheers,

Julio Carvajal Segura
http://laguiadelnetworking.com