How to optimize ASA performance for web traffic?

[ray_juarez]

Hi,

We are suffering slow https traffic download. We have a CISCO ASA 5550, Cisco Adaptive Security Appliance Software Version 8.0(5)19. When we try to download some videos from an https server we have a data download rate of about 140 kbps, but if we bypass the firewall and put a laptop just after the border router, data rate increase up to 350-400 kbps.

We configured a new interface in the firewall and we connected a laptop directly to the port in the ASA 5550, with a new ACL permit ip any any, just for test purposes, but data rate is still the same, 140 kbps.

Is there a way we can improve data rate?

Thanks in advance.

Raymundo Juárez

[Federico Coto Fajardo · Accepted solution]

Hi Raymundo,

The ASA has HTTP inspection disabled by default, but can you check if it's enabled?

Depending on the HTTP inspection configuration it could be slowing the traffic.

Check the output of sh run policy-map

Federico.

[ray_juarez]

Hi Federico,

Yes, http inspect was enabled. We did two things to solve this problem:

• disable http inspect
• disable symantec antivirus on pc's running windows

Thanks for your help!