cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3725
Views
0
Helpful
3
Replies

ASA 5510 Internet download speed is very slow

rajeev_22
Level 1
Level 1

Dera Team,

We are using ASA 5510 with internet link of 40 MB. we are facing issue of slow download speed. we have done all basic troubleshootings like: fixed duplex full on interfaces, checked CRC reeors on interfaces.

we are using around 40 L2L VPN tunnels on same ASA.

Please suggest me the troubleshooting steps:

Thanks and Best REgards

Rajeev Singhal

3 Replies 3

Julio Carvajal
VIP Alumni
VIP Alumni

Hello,

Check the service-policies inspections

Check the traffic being handled by the ASA

If you have an IPS or CSC module then check the configuration or check if its being oversupcribed ( Do not send the traffic to the modules as a test)

Do captures on the ASA interfaces.

Regards,

Julio

CSC it's a free support community take your time to rate all the engineer's responses that help you resolving your problems.

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Mohammad Alhyari
Cisco Employee
Cisco Employee

Hi ,

please check what Joulio suggested . and also paste the following here ,

show tech from the ASA .

attach  a captures from the ASA and the PC where do you test the download speed , don't test with any speed test site , just try to download a large file from the internet .

Run wireshark from your PC and sinff the packets .

also captures the traffic from the inside and the outside interfaces of the ASA and we can take a look at what is causing this .

hope that this helps.

Mohammad.

Hi Bro

I'm assuming when you say, you've done all the necessary basic troubleshooting steps, I hope you meant, if you were to bypass the Cisco ASA Firewall box, the downloading speed is good, but if you were to download via the Cisco ASA, this is slow, am I right?

If yes, then please check on the items advised by the folks above this comments and look for tell tale signs in show asp drop command.

As mentioned by jcarvaja earlier, is there any IPS or CSC module in your ASA?

Please note that SLOW is a very BIG word. You need to be specific.

Warm regards,
Ramraj Sivagnanam Sivajanam
Review Cisco Networking for a $25 gift card