What happens when ASA AIP SSM reaches throughput?

Unanswered Question
Mar 3rd, 2009


I'm just curious what happens to traffic when you have an IPS module in an ASA and it reaches the maximum throughput?

Does it allow the traffic & only inspects what it can handle? Or does it "fail" and then either allows all the traffic or block based on "fail-open" or "fail-close" configuration?



I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 1 (1 ratings)
vmoopeung Mon, 03/09/2009 - 09:12

The Cisco ASA 5510 Adaptive Security Appliance Intrusion Prevention System (IPS) provides a solution with Advanced Inspection and Prevention Security Services Module AIP-SSM-10. The Cisco ASA 5510 IPS solution with AIP-SSM-10 provides a higher IPS throughput of up to 150 Mbps plus industry-leading firewall protection.

melchib Mon, 03/09/2009 - 09:16

Ummm...Ok. Nice job. Unfortunately it doesn't answer my question.


This Discussion