10-08-2015 06:21 AM
Hi,
Is there a maximum number of DAP supported by ASA 55XX 9.4 ?
Cisco recommanded a maximum of 100 in 9.1. Is this still true in 9.4?
Thanks,
Patrick
Solved! Go to Solution.
10-08-2015 09:10 AM
Hi Patrick ,
There is not virtual limit for the DAP policies you can create on the ASA, this will depend more of the hardware you're using rather than the code the ASA is running. However there is a limit for the attributes inside each DAP.
Currently a maximum of 5000 values/instances can be processed per attribute in each DAP.
A syslog is generated when this limit is passed:
%ASA-3-109035: Exceeded maximum number (5000) of DAP attribute instances for
user = <username>
Hope it helps
-Randy-
10-08-2015 09:10 AM
Hi Patrick ,
There is not virtual limit for the DAP policies you can create on the ASA, this will depend more of the hardware you're using rather than the code the ASA is running. However there is a limit for the attributes inside each DAP.
Currently a maximum of 5000 values/instances can be processed per attribute in each DAP.
A syslog is generated when this limit is passed:
%ASA-3-109035: Exceeded maximum number (5000) of DAP attribute instances for
user = <username>
Hope it helps
-Randy-
10-09-2015 12:00 AM
Thanks for your quick answer, Randy !!
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: