Performance scaling factors for ASA with FirePower with clustering.

[danish.saeed]

What are the performance scaling factors for ASA with FirePower with clustering? Throughput, maximum connection, connections/sec, NGFW services, NGIPS services etc. Is there any document available for sizing?

[danish.saeed]

These are the scalability numbers i got. With clustering upto 16 ASA units; 640 Gbps (FW)/320 IMIX and 160 Gbps of NGFW/NGIPS. Need the maths for this      

[praetoleiad]

Hi Danish,

Here's the link for the sizing.

http://www.cisco.com/c/dam/en/us/products/collateral/routers/800-series-routers/firepower-services.pdf

Please rate helpful post and mark answered if the post answers your query.

[danish.saeed]

Thanks. Can you also direct me to any document discussing clustering for ASA-FirePower.

[allesmit]

Hey the link appears to be gone.  What happened to the sizing guidance doc?

[Nilo Noguera]

Hi Danish,

Performance Scaling Factor

When you combine multiple units into a cluster, you can expect a performance of approximately:

70% of the combined throughput

60% of maximum connections

50% of connections per second

For example, for throughput, the ASA 5585-X with SSP-40 can handle approximately 10 Gbps of real world firewall traffic when running alone. For a cluster of 8 units, the maximum combined throughput will be approximately 70% of 80 Gbps (8 units x 10 Gbps): 56 Gbps.

http://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/ha_cluster.html#12518

Related Documents:

Cisco ASA FirePOWER Module Quick Start Guide

http://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/sfr/firepower-qsg.html

ASA Cluster - Cisco ASA Series General Operations CLI Configuration Guide, 9.2

http://www.cisco.com/c/en/us/td/docs/security/asa/asa92/configuration/general/asa-general-cli/ha-cluster.html

Adaptive Security Appliance Cluster

http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Data_Center/VMDC/ASA_Cluster/ASA_Cluster/ASA_Cluster.html

Secure Data Center for Enterprise—Cisco ASA Clustering with FirePOWER

Services Design and Implementation Guide

http://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise/design-zone-security/sdc-dg.pdf

Secure Data Center for Enterprise—Threat Management with Passive Mode

NextGen IPS Implementation Guide

http://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise/design-zone-secure-data-center-portfolio/sdc_ngips_ig.pdf

I appreciate this opportunity to assist you and I do hope the information I sent you pointed you to the right direction.

Best regards,

"Nilz"

Nilo Noguera

.:|:.:|:. Security Specialist, Cisco Global Virtual Engineering - Cisco Partner Help

http://www.cisco.com/web/partners/tools/ph.html

[dvarner]

Here is another resource for comparing the ASA models.

Build & Price  www.cisco.com/go/asa and then compare models.