I have the problem with ftp speed to server behind the ASA.
I found out that this issue occurs in all our location (where we have ASA and some ftp server behind)
I have create some lab (only two hosts connected and no unnecessary configurations) :
inside network (client PC) ------ASA 5505 8.2(1)------- DNZ network (ftp server)
When I'm trying to download some files from the DMZ ftp serverer I have never had speed more than 4MBytes/s.
When I'm opening 2 sessions, speed is decreasing to about 2 MB/s.
At the same time when I'm trying to access the ftp server via SMB I can download files 3 times faster (about 12 MB/s) - so almost max FEth speed.
When I moved the server to inside network (both: client PC and ftp server were in the same network) I ccould download files using ftp service at the same speed like using SMB.
ip address 10.0.19.1 255.255.255.0
ip address 10.10.10.1 255.255.255.0
switchport access vlan 2
access-list dmz extended permit ip any any
access-list outside extended permit ip any any
access-group dmz in interface dmz
access-group outside in interface outside
service-policy global_policy global
The rest of configuration is default.
I have tested this on ASA5520 as well and it looks the same.
Now this is a big problem for us, because we have a separate link to assure max speed for our clients but it looks that ASAs restrict the throughput.
thanks in advance for your help.
I hope that we will not have to change ASAs to other FWs ....