ASA 5505 slow internet

[schiavone13]

I have an old 5505 and recently upgraded my internet from 75 to 100mbps but am only getting about 65mbps up and down. I spoke to the ISP, Verizon, who had me test the speed with my laptop connected directly to the Verizon equipment and I was getting 100mbps up and down. Verizon suggested I replace the 5505 but I would rather fix the existing equipment than have to purchase new.  I am posting my config with the show version if anyone would be kind enough to help me fix this issue. 

[kubn2]

Hi,

As you said at the beginning "old 5505" is the problem. Its great device but it have limitations which you facing right now. If you want to keep current configuration well you should buy something faster if you don't want to spend money you can move some ASA functions like NAT, ACLs, DHCP and other services to Router. This should free some resources on ASA and you should get better speeds.

[schiavone13]

I know I have to upgrade at some but when I run a show cpu command it does not look like a resources issue as the utilization is negligible. 

ASA# sh cpu usage detailed

Break down of per-core data path versus control point cpu usage:
Core 5 sec 1 min 5 min
Core 0 9.8 (0.0 + 9.8) 7.0 (0.0 + 7.0) 6.8 (0.0 + 6.8)

Current control point elapsed versus the maximum control point elapsed for:
5 seconds = 100.0%; 1 minute: 99.7%; 5 minutes: 100.0%

ASA# show processes cpu-usage sorted non-zero
PC Thread 5Sec 1Min 5Min Process
0x0985609b 0xc75b76b4 7.1% 6.1% 6.2% esw_stats
0x090bc5a5 0xc75ad2f4 0.3% 0.0% 0.0% ssh
0x08280b21 0xc75c5bf4 0.1% 0.3% 0.2% Dispatch Unit
0x08ce6dec 0xc75b55f4 0.1% 0.1% 0.1% update_cpu_usage

CPU utilization of external processes for:
5 seconds = 0.0%; 1 minute: 0.0%; 5 minutes: 0.0%

Total CPU utilization for:
5 seconds = 9.8%; 1 minute: 7.1%; 5 minutes: 6.9%

[kubn2]

Do you checking CPU utilization during speedtest? If not then check it during speedtest or when you downloading some big file.

[balaji.bandi]

More complex rules will be degrade the performance of ASA, since it need to process all required parameters before deliver.

see some tips to tune, see you get any better outcome :

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/113185-asaperformance.html