Does anyone know what are the upper limit of the following numbers when we do "show perfmon" ? For example if the "xlates" current is "100000/s" than the PIX has reach the upper limit of its performance, and that is the time to upgrade the hardware (memory upgrade, etc).
The goal is to monitor the PIX performance, and fine tuning it before its reach the upper limit. Any experience with PIX 515 would be very appreciated.
As for the capabilities of the 515E, it can provide 125,000 simultaneous sessions and 188 Mbps of clear text throughput (63 Mbps 3DES). I believe these are the numbers that really matter. You can baseline performance times/throughput on the PIX and if performance starts to slide look to increasing memory (64 MB is the max on the 515E I think) or change the PIX itself as there is a limit on what it can handle. To help baseline look into a tool called QCheck by NetIQ (measure throughput and times) and another called MRTG (grabs MIBs).
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...