Firepower - High CPU and latency

[Jon Are Endrerud]

Hey

Im Running Firepower with on a 5555X. Using the FireSIGHT console to manage.

When sending one of our internet connected interface through FirePOWER, the CPU jumps up 25-30 % on the ASA and the latency goes up with 40-150ms. 

I need to find out whats causing this, Cisco licensing is expensive and I didnt think that HW would be a problem.

The problem escalate as the traffic rises. When reaching 600-700mpbs the ASA drops packets as well.

Thanx.

[Dennis Perto · Accepted solution]

You are very lucky if you can push 600-700Mbit/s through the FP module in your 5555-X. 
With AVC and IPS functionality it is rated at 450Mbit/s, even further down with URL and AMP activated. 

If you need the ASA functionality you should go with either:

5585-X SSP EP 10/40

5585-X SSP 40

5585-X SSP EP 20/60