FTD NAT

[benolyndav]

Hi

Does anyone know if its possible that FTD might be adding latency to traffic? we have a site to site with a 3rd party where we nat our clients going to them (Dyanmic) and we have static nat for our servers where they keep their own address, what we are seeing at certain times is very high response times for client traffic which is nat'd but the server traffic remains fine all this traffic going to same 3rd party down tunnel,  has anyone else seem this and has anyone any tips on diagnosing.???

Thankyou

[balaji.bandi]

This required more of analysis hop by hop, is this really causing of NAT or any other part of the Network.

1. Do you have NMS ? you monitor links? do you see any overload or packet drops?

2. how is your network from FTD to Server? what devices in between - this required to verify.

3. at the time of the issue, do you see the same issue locally?

4. at the time of issue what is the other side of network usage ? do you have any visibility?

5. is this issue only for that VPN ? or any other VPN or users?

check the NAT and troubleshoot :

https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/212702-configure-and-verify-nat-on-ftd.html

Troubleshoot to capture information for analysis :

https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/215092-analyze-firepower-firewall-captures-to-e.html