1. initial start what is the link on outside interface how much utilization is consumed on outside interface. /ANS: Right now, we're having a lot of traffic in this interface, but this issue was happening even before the Coronavirus outbreak, I meant, since three or four months ago.
2. anyconnect client getting a slow response if all of these end client having issue than could be a problem on ASA interface facing connection. /ANS: we found out that ASA 5525X only supports until 300 Mbps encryption/decryption traffic, and right now, slow issue is mainly happening because of this, but, before of this situation, when not many useres usually were connected through VPN tunnels, connection was really slow too.
3. anyconnet clients are using TLS or DTLS. /ANS: we're having another issue, related with not using DTLS but TLS instead. This issue is about windows remote assitance some internal users (people inside the company) give to people connected trhough Anyconnect VPN. Apparently, we're having slow connections or sometimes the connection failed when people from helpdesk initiates this connection. The reason why we're not using DTLS is because our customer's ASA behind a Citrix load balancer whom is facing internet connection. Output ASA interface has a private IP address and this address is being nated on that Citrix device, so at Citrix device we're configuring a virtual server with HTTPS. A Cisco Engineer TAC told us that we need to use udp 443 port for the DTLS tunnel to be established. I don't know if these slow issues are related with this other issue.
4. why client are doing a downloading the data? any reason./ANS: clients needs to download resources from some servers and tryin to access Internet. We're not using split tunneling because there are several internet browsing policies our customer have configured for only enterprise users and devices can use internet service by using a proxy service.
Finally, I would like to know if it is possible to assign an specific BW for every anyconnect client or if it is not possible and each client take his BW by demand, I meant, every client taking as much traffice it needs.
Thank you so much in advance.
