ASA performance tuning

[vipinrajrc]

Hi Experts,

Is there any way for ASA's performance tuning??? please reply ASAP.......

Thanks

Vipin

[Federico Coto Fajardo]

Vipin,

Kind of a broad question....

I guess you can do some tuning for the TCP traffic passing through, for VPN performance, etc.

Maybe this link will help:

PIX/ASA: Monitor and Troubleshoot Performance Issues

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008009491c.shtml

Hope it helps.

Federico.

[sean_evershed]

Here is another link that may prove useful. This focusses on HTTP issues:

https://supportforums.cisco.com/docs/DOC-8982

[vipinrajrc]

Hi Guys

thanks for your reply...

What i meant is.. is there any method ....so that performance of the ASA can be informed..

thanks,

Regards.

[sean_evershed]

Do you mean something like SNMP monitoring where you can measure things like memory, CPU, bandwidth etc on the ASA?

If so you will need SNMP monitoring software.

The config on the ASA would look something like this assuming the SNMP server is on your inside network:

snmp-server host inside A.B.C.D community xyzabc

[Federico Coto Fajardo]

As Sean said you can use SNMP to monitor performance.

Another nice way to 'see' what's happening is NetFlow.

In case you're interested:

https://supportforums.cisco.com/docs/DOC-6113

Federico.

[vipinrajrc]

Hi Experts,

Sorry for the late reply......!!!!!!

we can monitoring performance using SNMP,Syslog & Netflow right????

Which is the best??? I configured SNMP and I have solarwinds to monitor it......... So leave SNMP.... Then Between Syslog & Netflow which is the best???

I didnt go through the document you guys gave me.. I am going to refer and i will implement it..... I will update it soon....

Thanks

Vipin Raj

[Federico Coto Fajardo]

Some comparison points:

• SNMP can be used for real-time (i.e. every second)  and although NetFlow provides beginning and end times for each flow, it  isn’t nearly as real-time as SNMP.  In fact, due to the active timeout issue, NetFlow really can’t provide granularity finer than 1 minute  else, it sort of defeats the idea of NetFlow’s awesome aggregation.
  
• NetFlow tells you who and with what is  consuming the bandwidth, it is also much more verbose than SNMP and  therefore NetFlow exports consume much more disk space for historical  information
• SNMP can be used to collect CPU and memory utilization and that just isn’t available yet using NetFlow.

I gave you detailed information about NetFlow on the last post, you can also check SNMP for ASA here:

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/monitor_snmp.html

Hope it helps.

Federico.