MAX throughput ASA

[Rodrigo Gurriti]

Hello,

I wanted to know how can I calculate this numbers?

http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html

Here it says an ASA5520 supports maximum firewall throughput of 450Mpbs how do I account that ? Do I add all the throughput IN and OUT or just one way ?

for instance:

GigabitEthernet0/0:

        received (in 439.170 secs):

                6456439 packets 2579157446 bytes

                14701 pkts/sec  5872799 bytes/sec

        transmitted (in 439.170 secs):

                8959140 packets 5834108051 bytes

                20400 pkts/sec  13284395 bytes/sec

      1 minute input rate 14965 pkts/sec,  7189995 bytes/sec

      1 minute output rate 19738 pkts/sec,  12572887 bytes/sec

      1 minute drop rate, 41 pkts/sec

      5 minute input rate 11664 pkts/sec,  5506653 bytes/sec

      5 minute output rate 21365 pkts/sec,  13596405 bytes/sec

      5 minute drop rate, 25 pkts/sec

Do I account for input rate and output ? Is there a document where cisco explains these values ?

Regards,

[Eugene Khabarov]

I think there is no such ducuments. Really it is marketing numbers. It can be couned as througthput of Ingress+Egreess tested with 64k packets with minimum possible configuration. Really it is about half of this througthput for this model if there is not specially mentioned that IMIX testing was used.

___

HTH. Please rate this post if it was helpful. If this solves your problem, please mark this post as "Correct Answer"

[Rodrigo Gurriti]

I have one box with a high processing and few dropped packets.

I wanted to know if the throughput is measured input/output because if I sum only the input I get around 230Mbps and if I add the output I get around 400Mbps

Regards,

[Eugene Khabarov · Accepted solution]

Also look at this interesting results for 5520:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/prod_white_paper0900aecd80350d4e.pdf

So by this document real life firewall throughput is about 200 Mbit/s as I already suggested. Here is also test methodology described.

Throughput means ether ability to pass traffic one way at 200Mbin/s or with any proportions in both directions (50+150, 100+100 etc.).

___

HTH. Please rate this post if it was helpful. If this solves your problem, please mark this post as "Correct Answer"