FMC API too slow

[trial]

Hi!

I am using a virtual FMC 6.4.0 in order to do a migration from ASA. As you know, once you migrate the ASA policy package it creates you a rule for each ACE which extremely increases the number of rules in the FMC (in my case up to 20.000 rules).

Ok, just for getting the same rule number than in the CSM of ASA (more or less 2000 rules), I have developed a python API script. But, the performance of the firepower management center API is very poor, for each response to put requests the FMC lasts up to 70 seconds.

Does anybody experience this poor performance?

Every vmware statistic seems normal: CPU usage, RAM usage...

[leejan1988]

Same experience. I am updating IPS policies on my FTD with 7000+ ACPs. FMC takes more than 30 seconds to update each IPS policy.  i am also looking for a solution to speed it up...

[1_am_r00t]

did you ever manger to fix the issue?

[leejan1988]

not yet. just wait for the response every time

[1_am_r00t]

I "fixed" the issue by doing an upgrade from 6.6.5.1 to 6.6.5.2. I think the issue was related to an error in one of the DB's of FMC. By doing the upgrade the tables somehow seem to have been repaired.