ASA Performance with Content Filtering/Inspection

[Roble Mumin]

I am thinking of configuring an ASA as an Edge Device for

+ Content Filtering with SmartFilter

+ Inspecting Mail and General Traffic with the CSC Module

+ terminate RA VPN (AES)

+ and using the statefull firewall features

What i am a bit concerned about is the performance.

Is the ASA fast enough to do everything at the same time or do you have to split up the features on different ASA's? e.g 1x 5520 vs 2x 5510 maybe.

Is the content filtering with WCCP and the traffic inspection with the CSC possible at the same time?

Thanks for reading.

Roble

[daviddtran]

There is a bug ID regarding Pix/ASA and

URL filtering with N2H2 and Websense. The bug

id is CSCsc36891. Even with moderate http

traffics will cause high cpu on the Pix/ASA.

Just keep that in mind.

David

[Roble Mumin]

Thanks for the Feedback. A bug means it might get fixed.

I hope somebody already configured this and has some additional experience to share.

Roble