cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
584
Views
0
Helpful
1
Replies
Highlighted
Beginner

Bandwith Capacity Planning for 100 user SSL VPN Facility

What are things we should conisde while doing the  bandwidth capacity planning for SSL VPN Facility for 100 users  ?       

1 REPLY 1
Highlighted

Hi Surya,

This is not an easy question, since there are so many things to consider that I may miss some of them.

1- In case you are planning to use an ASA, check this to find the ideal throughput for you:

         Compare Models

2- What type of traffic? TCP or UDP?

     If TCP

          Make sure you avoid fragmentation, adjust the MSS value if necessary.

     If UDP

          If fragmentation must happen, then set the DF bit to clear to allow it.

3- Make sure the clients always negotiate DTLS (which is by default).

As mentioned in the document above:

"Maximum throughput measured under ideal test conditions.

VPN throughput and sessions count depend on the ASA device configuration and VPN traffic patterns. These elements should be taken into consideration as part of your capacity planning."

Thanks.

Portu.

Please rate any post you find useful.

Content for Community-Ad