CPU Utilisation when running two Syslogs ASA5550

[J54041057]

I was wondering if any one can help. I want to run two syslogs, one to Loglogic for compliance and the other to Solarwinds for network administration. Currently the firewall is setup for just the one syslog device. If I add an additional device ie further IP in the config for the Loglogic box will there be any noticeable differences in the performance of the firewall, does affect the cpu utilisation, or memory in any way.  

[mirober2]

Hi Jeremy,

Anytime you add a syslog destination, you require the firewall to generate and send an additional packet for every log message so there will be a small amount of additional overhead. However, given that you're only going from one server to two, I would expect the difference to be almost negligible and it should not affect performance in a noticeable way. Unless you are already pushing traffic through the firewall at close to the capacity of the box (i.e. if you're already above 80% or 90% CPU/memory utilization with 1 logging destination), you should be just fine.

Hope that helps.

-Mike