Firewall throughput means ?

[Kuldeep singh]

Hi Experts,

1. What does mean of Firewall Throughput of Cisco ASA 5550 ?

2. I see data sheet of Cisco ASA 5550, it supports 1.2 gbps throughput ?

    i am assuming that we can terminate isp internet link upto 1.2 Gbps,

   Correct me if i m wrong ?

3. Firewall Throughput is per port specific or Whole device specific ? plz

    clarify

KS

[Marvin Rhoads]

Exact firewall throughput is a pretty complex calculation. Cisco uses a pre-defined mix of traffic that represents "typical" customer usage when specifying the numbers. the published number is for the whole device and reflects that "imix" traffic type. Use of features such as VPN and advanced inspection rules can reduce your overall throughput.

[Kuldeep singh]

anybody else can help me out

[Marvin Rhoads · Accepted solution]

1. See my earlier answer.

2. The physical ports are 1 Gbps so that is your limiting metric for a given connection.

3. The published numbers are for the overall device, not per port.

[adam.baxter]

The ASA5550 will not do 1gig single stream throughput, the bus from each bank of gig interfaces is limited to around 650mbits, so to get the advertised 1.2gig throughput you need to have 600mbit going in and out of 1 bus and 600mbit going in and out of another bus. All they have done compared to the ASA5540 is added more ethernet ports in the empty slot and increased the CPU and memory i assume. We have ran into this problem..

and another super crap problem is that with etherchannel support in the newer image you cant group interfaces from one bus with another bus.

some url's below to check out

http://ccna2ccnp.blogspot.com.au/2012/12/ciscoasa-oversubcription-maximizing.html

https://supportforums.cisco.com/thread/2068549

Hope this helps

Adam