topic Firewall throughput means ? in Network Security

Firewall throughput means ?

Kuldeep singh — Tue, 12 Mar 2019 01:58:31 GMT

Hi Experts,

1. What does mean of Firewall Throughput of Cisco ASA 5550 ?

2. I see data sheet of Cisco ASA 5550, it supports 1.2 gbps throughput ?

i am assuming that we can terminate isp internet link upto 1.2 Gbps,

Correct me if i m wrong ?

3. Firewall Throughput is per port specific or Whole device specific ? plz

clarify

Firewall throughput means ?

Marvin Rhoads — Mon, 17 Jun 2013 13:21:51 GMT

Exact firewall throughput is a pretty complex calculation. Cisco uses a pre-defined mix of traffic that represents "typical" customer usage when specifying the numbers. the published number is for the whole device and reflects that "imix" traffic type. Use of features such as VPN and advanced inspection rules can reduce your overall throughput.

Firewall throughput means ?

Kuldeep singh — Mon, 17 Jun 2013 16:49:41 GMT

anybody else can help me out

Firewall throughput means ?

Marvin Rhoads — Tue, 18 Jun 2013 02:36:44 GMT

1. See my earlier answer.

2. The physical ports are 1 Gbps so that is your limiting metric for a given connection.

3. The published numbers are for the overall device, not per port.

Firewall throughput means ?

adam.baxter — Wed, 19 Jun 2013 23:20:31 GMT

The ASA5550 will not do 1gig single stream throughput, the bus from each bank of gig interfaces is limited to around 650mbits, so to get the advertised 1.2gig throughput you need to have 600mbit going in and out of 1 bus and 600mbit going in and out of another bus. All they have done compared to the ASA5540 is added more ethernet ports in the empty slot and increased the CPU and memory i assume. We have ran into this problem..

and another super crap problem is that with etherchannel support in the newer image you cant group interfaces from one bus with another bus.

some url's below to check out

http://ccna2ccnp.blogspot.com.au/2012/12/ciscoasa-oversubcription-maximizing.html

https://supportforums.cisco.com/thread/2068549

Hope this helps

Adam