will setting source and destination ip at any ip influence performance of ASA

[martlee2]

if there is a signature's ip range not covered new victims' ip addresses in ISP,

is it a good practice to set source and destination ip with any ip ?

will it slow down the performance?

[Vibhor Amrodia]

Hi,

It would depend more on the Signature Type. For ex:- If it is a TCP normalizer signature , it might affect the performance more than a ICMP signature.

Also , it would depend on the amount of traffic that would be matching this traffic.

Thanks and Regards,

Vibhor Amrodia