cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
583
Views
0
Helpful
7
Replies

Data Backups through ASA appliance

richardfinnie
Level 1
Level 1

Hi There,

We are currently looking at building out our Data Center to support a managed backup solution for multiple clients. We are currently looking at pushing the backups through a pair of ASA5580-20 appliances, however I have concerns as I haven't had much success with backups through a firewall in the past (albeit much smaller firewalls). Has anyone/Is anyone doing this now? Do you current see any performance degradation? What platform are you using? Thanks for your help.

7 Replies 7

cisco24x7
Level 6
Level 6

I setup a pair of IBM 3650s Servers running

in Checkpoint Firewall NGx R65 in Active/Active ClusterXL unicast mode. We have about 10 customers behind this pair of firewall for managed backup solution. Each

customer has copper Gig to the firewall and

that the main connection to the veritas backup is a 10GB interface on the firewall.

The ibm Server is dual processors with

quad-core processors 3.16Ghz with 4GB RAM.

Throughput is excellent.

I am not sure the ASA 5580 can provide

the throughput you are looking for. You

may want to look at FWSM.

CCIE security

What type of throughput do you recieve? The 5580 is rated at 5Gbps real-world and 10Gbps jumbo frames, and I have done some throughput tests on various other platforms and have not seen these types of results.

abinjola
Cisco Employee
Cisco Employee

ASA 5580 has tremendous back up and throughput 5GBps - 10 Gbps

http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html

Yes, I have read all the marketing fluff, however I have learned by experience that this doesn't translate into real world results. I am looking for people currently doing this with this platform or another platform and what their experiences are.

The 5580 is a new product, so you'll likely not immediately find folks able to type a reply here indicating a successful deployment in this scenario.

That said, the 5580 is positioned for, among other roles, precisely the deployment you are looking at. I can confidently recommend this solution, assuming the bandwidth requirements are a match. The 5580 was tested with various traffic types and loads, consistent with your intended use. I would recommend 10Gb interfaces if you want to achieve 1Gb+ throughput for a given flow.

"The 5580 was tested with various traffic types and loads, consistent with your intended use."

If I understand you correctly, I can setup a

couple of IBM 3560 Servers, dual Intel

quad-core 3.16Ghz processors with 8GB RAM,

with 10Gb interface on the servers, running

Gentoo Linux. If I place an ASA 5580 between

these two servers and test the throughput

through the ASA 5580 with IPerf, I can

achieve 1Gb+ throughput for a given flow?

This to me is a real-world scenario. Most

of the times, testing by vendors come from

smartbit, which throw a lot udp traffics

through the device and declare a success.

Does Cisco test the ASA 5580 with Spirent

Web Avalance and Web reflector?

Yes. I would recommend you contact your local Cisco sales team, i'm sure my local counterpart would be happy to bring an evaluation unit on site to confirm your requirements before purchase.

Warm regards..

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: