Bandwidth capability on ASA 5520's

[Rick Schwendiman]

Need a little help on figuring out how much bandwidth I can drive through a ASA 5520-VPN Plus running 8.2(5).

Thanks

[Marvin Rhoads · Accepted solution]

See the product data sheet.

It's about 450 Mbps of pure firewall inspection. If IPS and VPN services are used, those will typically reduce the overall throughput as listed in the data sheet.

[Rick Schwendiman]

Thanks Marvin,

I finally dug around enough and found the data.  Appreciate your time and response.

[James Leinweber]

It also depends on traffic and configuration.  I can get about 620 Mbit/s across a 5520 in a test lab with a single TCP stream, similar to the specs.  An IPsec tunnel with AES and SHA1 can hit 300 Mbit/s, which is over the specs, though I suspect 3DES would be a lot slower.  But I can also suffer overruns and underruns on live traffic at a mere 50 Mbit/s when I have hundreds of clients.

-- Jim Leinweber, WI State Lab of Hygiene