ASA5520 performance

osiristrading · ‎07-16-2009

Hi everyone

We're noticing under stress testing that our ASA5520 is maxing its CPU out at about 3900 TCP connections per second. This is way lower than what Cisco quotes, and our rule set is quite small (a few dozen rules).

Is this normal? We are using an AIP-SSM-20 module - could that have an effect on the firewall CPU?

Thanks

branfarm1 · ‎07-16-2009

What are you using to stress test your 5520?

Do you have any of the advanced threat-detection or scanning-threat detection enabled? Those can both place high CPU stress on your device in certain situations.

osiristrading · ‎07-16-2009

No advanced threat detection enabled. We are using the Microsoft web application stress test tool - all it does it a simple HTTP get on an object on the web server.