I'm having a throughput problem with a new ASA 5540 running version 8.2 (1). When trying to access a database server using tcp port 1521 (sqlnet) it is about 10 to 20 times slower than when the database is not behind the firewall. We've been running the same software on a database behind an ASA 5520 running version 8.0 (3) with no problems for years. When I check the cpu usage on the 5540 at the ASDM home page, it is rarely above 20% and never above 30% while this is being tested. I tried testing ftp throughput over the same interface and it was normal with ~320 Mbps average rate transferring a 500 MB file. What could be the problem?
On the inspection itself? No, I dont think so. Is not that the traffic is flowing without inspection, it is being inspected, but not under RFC compliance of Sqlnet protocol.
You may be hitting this bug
ASA 8.2.1 - Enabling inspect sqlnet adds 5 sec delays to big DB queries
Symptom: When "inspect sqlnet" is enabled on ASA, single-connection version of SQLnet protocol experiences 5-seconds delays on big DB queries. There may be multiple delays in a single SQLnet TCP session. When inspection disabled, there are no delays. Conditions: - single-session version of SQLnet protocol is used (i.e. TCP/1521 is used both for command and data sessions) - "inspect sqlnet" is enabled on ASA Workaround: Disable sqlnet inspect. For single-session version of SQLnet protocol, disabling the inspect sqlnet does not have operational impact since there are no secondary connections that are being dynamically permitted through the firewall.
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...