Hi,

I'm planning installation of a Cisco ASA 5525-X with SFR module. The SFR Module will communicate with the FMC over a Site-to-Site VPN connection. I was wondering how event logging would impact VPN performance both at the remote site and the central site where the FMC is located.

Typically I tag each rule for event logging back to the FMC. Outbound traffic is about 1.8Mbps, and inbound traffic is currently being throttled at 10Mbps. Outbound packet rate is 1960 pps average, Inbound packet rate is 1205 pps average. The 10Mbps throttled connection will be replaced with a 1GB internet connection.

Also, does the SFR module send events to the FMC packet-by-packet, or does it collect events and send periodically?