Cisco 2851 speed drops drastically with the NME-IPS-K9 Module

[DAVID RICHWALSKI]

I have a Cisco 2851 with a NME-IPS-K9 module in it

My normal speed is 118Mbps download

As soon as I add the line ids-service-module monitoring inline access-list 101

my speed drops to 30Mbps download and this is with all of the inspection settings set to their default values.

I have IP CEF on

Anyone have a suggestion, Thanks in advance

[Philip D'Ath]

That sounds believable to me.  I'm not sure anything is wrong.

You would have to spend some time on the IPS module and see what engines are being used.  One (or more) of those engines to likely o be affecting the performance.  Then again, turning them off will reduce the effectiveness of the solution.

I imagine a low cost 5506 with Firepower will drastically out perform a 2811 with an IPS module.