topic Re: ASA performance tuning in Network Security

ASA performance tuning

vipinrajrc — Mon, 11 Mar 2019 19:55:55 GMT

Hi Experts,

Is there any way for ASA's performance tuning??? please reply ASAP.......

Thanks

Vipin

Re: ASA performance tuning

Federico Coto Fajardo — Thu, 24 Feb 2011 02:56:23 GMT

Vipin,

Kind of a broad question....

I guess you can do some tuning for the TCP traffic passing through, for VPN performance, etc.

Maybe this link will help:

PIX/ASA: Monitor and Troubleshoot Performance Issues

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008009491c.shtml

Hope it helps.

Federico.

Re: ASA performance tuning

sean_evershed — Thu, 24 Feb 2011 06:32:35 GMT

Here is another link that may prove useful. This focusses on HTTP issues:

https://supportforums.cisco.com/docs/DOC-8982

Re: ASA performance tuning

vipinrajrc — Thu, 24 Feb 2011 07:01:21 GMT

Hi Guys

thanks for your reply...

What i meant is.. is there any method ....so that performance of the ASA can be informed..

thanks,

Regards.

Re: ASA performance tuning

sean_evershed — Thu, 24 Feb 2011 08:17:54 GMT

Do you mean something like SNMP monitoring where you can measure things like memory, CPU, bandwidth etc on the ASA?

If so you will need SNMP monitoring software.

The config on the ASA would look something like this assuming the SNMP server is on your inside network:

snmp-server host inside A.B.C.D community xyzabc

Re: ASA performance tuning

Federico Coto Fajardo — Thu, 24 Feb 2011 16:10:25 GMT

As Sean said you can use SNMP to monitor performance.

Another nice way to 'see' what's happening is NetFlow.

In case you're interested:

https://supportforums.cisco.com/docs/DOC-6113

Federico.

Re: ASA performance tuning

vipinrajrc — Fri, 25 Feb 2011 01:48:30 GMT

Hi Experts,

Sorry for the late reply......!!!!!!

we can monitoring performance using SNMP,Syslog & Netflow right????

Which is the best??? I configured SNMP and I have solarwinds to monitor it......... So leave SNMP.... Then Between Syslog & Netflow which is the best???

I didnt go through the document you guys gave me.. I am going to refer and i will implement it..... I will update it soon....

Thanks

Vipin Raj

Re: ASA performance tuning

Federico Coto Fajardo — Fri, 25 Feb 2011 02:10:45 GMT

Some comparison points:

SNMP can be used for real-time (i.e. every second) and although NetFlow provides beginning and end times for each flow, it isn’t nearly as real-time as SNMP. In fact, due to the active timeout issue, NetFlow really can’t provide granularity finer than 1 minute else, it sort of defeats the idea of NetFlow’s awesome aggregation.

NetFlow tells you who and with what is consuming the bandwidth, it is also much more verbose than SNMP and therefore NetFlow exports consume much more disk space for historical information

SNMP can be used to collect CPU and memory utilization and that just isn’t available yet using NetFlow.

I gave you detailed information about NetFlow on the last post, you can also check SNMP for ASA here:

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/monitor_snmp.html

Hope it helps.

Federico.