We have a customer with an SA520 at site A on a 100/20 Mbps connection. Site B has an RV 120W on a 100/20 connection. Assuming that the lowest pipe will always win, I was expecting to get close to 20 Mbps between sites when traffic was low. The result is quite astoundingly poor in comparison. 7 Mbps. Windows PPTP VPN to as Server at Site A is
Sizing throughput [440 byte HTTP]: Application Control (AVC) or IPS/NGIPS (max) 725 Mbps: 575 Mbps: 375 Mbps: 300 Mbps: 180 Mbps: 90 Mbps: 90 Mbps: 90 Mbps: Cisco AnyConnect Plus/Apex VPN maximum simultaneous connections Cisco IPsec and SSL VPN Solutions Portfolio Cisco VPN Client auto-update capabilities found in Cisco remote-access VPN solutions deliver a uniquely scalable, cost-effective, and easy-to-manage remote-access VPN architecture. With a greater throughput capabilities than the widely deployed Cisco VPN 3000 Series Concentrators MX Sizing Guide - Cisco Meraki Max site-to-site VPN throughput 100 Mbps 200 Mbps 250 Mbps 500 Mbps 1 Gbps 2 Gbps Max concurrent site-to-site VPN tunnels 1 50 50 100 250 3,000 5,000 Recommended maximum concurrent site-to-site VPN tunnels 2 50 50 100 250 1,000 1,500 Recommended maximum concurrent client VPN tunnels 50 50 100 250 5003 5003 Site-to-site VPN performance - Cisco Community The result is quite astoundingly poor in comparison. 7 Mbps. Windows PPTP VPN to as Server at Site A is 15 Mbps. RV120W VPN throughput: 25Mbps. SA520 VPN throughput: 65Mbps (Triple Data 260, 340, and 345 Series Routers Due to an API change in Cisco’s software download platform the Automatic Download Feature (ASD) on RV series routers
ASA 5516-X sizing throughput (AVC or IPS enabled) is 300Mbps. AMP can result in a performance penalty of around 30-50% depending on configuration. When we calculate the throughput using the maximum AVC/IPS performance which is rated at 450Mbps and apply AMP penatly of 50%, 200Mbps sounds like a reasonable result.
With Cisco ASA firewalls, you can integrate multiple enterprise-class, next-generation network security services without sacrificing performance. Cisco ASA combines the most deployed stateful inspection firewall in the industry with next-generation firewall capabilities. Read more about the ASA 5500 and ASA 5500-X Series for small and branch Compare Models - Cisco
Comparison between Cisco ASA and Fortinet FortiGate Article (PDF Available) in Journal of Electrical and Computer Engineering 21(3):34-36 · May 2019 with 2,993 Reads How we measure 'reads'
Jul 20, 2008 Fortinet Fortigate 30E vs 50E/51E vs 60E/61E - Firewall Jun 11, 2020 Compare Cisco ASA Firewalls 5505 vs 5510 vs 5512-X and 5515 Aug 07, 2014 ASA5525-K9 Datasheet Overview - Cisco Router, Cisco Switch