07-16-2009 11:23 AM - edited 03-11-2019 08:56 AM
Hi everyone
We're noticing under stress testing that our ASA5520 is maxing its CPU out at about 3900 TCP connections per second. This is way lower than what Cisco quotes, and our rule set is quite small (a few dozen rules).
Is this normal? We are using an AIP-SSM-20 module - could that have an effect on the firewall CPU?
Thanks
07-16-2009 02:25 PM
What are you using to stress test your 5520?
Do you have any of the advanced threat-detection or scanning-threat detection enabled? Those can both place high CPU stress on your device in certain situations.
07-16-2009 10:19 PM
No advanced threat detection enabled. We are using the Microsoft web application stress test tool - all it does it a simple HTTP get on an object on the web server.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: