The solution uniquely extends the capabilities of the Cisco ASA 5500-X Series Next-Generation Firewalls beyond what today’s NGFW solutions are capable of. How? By combining the proven security capabilities of the Cisco ASA firewall with the industry-leading Sourcefire® threat and Advanced Malware Protection (AMP) features together in a single device. Cisco® ASA with FirePOWER Services delivers integrated threat defense for the entire attack continuum - before, during, and after an attack. Here is a screenshot of the WAN performance of the ASA 5506-X 300mbit.Meet the industry’s first adaptive, threat-focused next-generation firewall (NGFW) designed for a new era of threat and advanced malware protection. Anyone else done speedtesting on it? Let me know your thoughts! In my opinion, I think the 750mbits will not be reached or very difficult to get to as the CPU on the device will be quite high and packets might start getting dropped. If 3 WAN reach 67% CPU, if I did add another link it, the CPU will nearly be maxed out at 400mbits. Upon looking at the Cisco documentation they mention at minimum it will do is 750mbit for firewall performance. This is only with the firewall on, and no other features turned on such as the Firepower. Upon testing and maxing the speed at 300mbit across 3 interfaces, the CPU on the device reached to 67%. Hardware: ASA5506, 4096 MB RAM, CPU Atom C2000 series 1250 MHz, 1 CPU (4 cores) Here are some of the specs of the 5506-X using show version: I used the PBR (Policy Based Routing) on the device to and some access lists to forward traffic where I wanted it to go.
I got 3 x 100mb WAN links and connected them in and assigned 3 outside interfaces and decided to run a 5GB speedtest file on each link terminating. I recently got the new Cisco 5506-X and I thought to benchmark the WAN speed on it and see what it can actually push.
0 kommentar(er)
