ASA service module on C6807-XL

[mike kao]

Hi,

I'm planning one ASA service module on C6807-XL.

Can I install more ASA service module on C6807-XL?

e.g. 4 ASA service modules increase performance to 80Gbps.

[Marvin Rhoads · Accepted solution]

Normally we use a single ASA SM or, for HA, a pair.

Adding more could theoretically increase performance if you had an architecture that allowed you to assign a distinct group of VLANs to each SM with the "firewall vlan group" and "firewall module" commands.

However you would be MUCH better off using an external firewall like the FirePOWER 4140 using ASA software. It will cost less and be much more future proof. The ASA SM has limited lifetime going forward as it is an older architecture that will not be enhanced much further.