topic Poor Performance ASA 5510 in Network Security

Poor Performance ASA 5510

nmansi — Mon, 11 Mar 2019 11:23:41 GMT

Network throughput significantly degraded through ASA 5510. Lost about 50% of network throughput when connected through an ASA 5510. Any suggestions/ideas?

Re: Poor Performance ASA 5510

Wed, 10 Oct 2007 21:15:22 GMT

What does your config look like? Maybe your ACLs are adversely affecting performance? Are you're interfaces hard coded duplex/speed?

Re: Poor Performance ASA 5510

nmansi — Wed, 10 Oct 2007 22:50:03 GMT

I only have 2 access lists, one to nat all traffic to the outside interface and the other is a crypto access list. Each is 4 lines.

Re: Poor Performance ASA 5510

JORGE RODRIGUEZ — Wed, 10 Oct 2007 22:51:11 GMT

In addition to Alonzo's remarks in checking duplex etc.. I would suggest you gather basline overall traffic/connections information from the ASA firewall.. I have 515E's and I do use the following link for keeping eyes opened on performance issues when they appear, although the bellow link pertains for PIX 500 series most of the information in it can be used as an example in gathering info & troubleshooting performance on the ASA as well.

http://www.cisco.com/warp/public/110/pixperformance.html#pre

Re: Poor Performance ASA 5510

whisperwind — Fri, 12 Oct 2007 12:48:49 GMT

Likely the ASA is seeing traffic it does not like for some reason, review that, check logging levels and make sure you are logging errors not debugging and also any IDS checks.

Posting the overall config maybe helpful as well.