What happens when ASA AIP SSM reaches throughput?

[melchib]

Hi,

I'm just curious what happens to traffic when you have an IPS module in an ASA and it reaches the maximum throughput?

Does it allow the traffic & only inspects what it can handle? Or does it "fail" and then either allows all the traffic or block based on "fail-open" or "fail-close" configuration?

Thanks,

Brad

[vmoopeung]

The Cisco ASA 5510 Adaptive Security Appliance Intrusion Prevention System (IPS) provides a solution with Advanced Inspection and Prevention Security Services Module AIP-SSM-10. The Cisco ASA 5510 IPS solution with AIP-SSM-10 provides a higher IPS throughput of up to 150 Mbps plus industry-leading firewall protection.

[melchib]

Ummm...Ok. Nice job. Unfortunately it doesn't answer my question.