Newer ASA Memory warning

[icecream-guy]

Just spent the last 15 minutes trying to navigate to the ASA5515x page on Cisco.com to see the information, and I've not been able to find the page. I can get to the security firewall area, but can't find the specific specifications page for the ASA5515x. Given up.

http://www.cnet.com/products/cisco-asa-5515-x-firewall-edition-security-appliance-series/specs/#p=cisco-asa-5515-x-firewall-edition-security-appliance/


.61 seconds to search and two minutes to view results.

[deanwebb]

To be fair, he was searching through Cisco's website.

[icecream-guy]

To be fair, he was searching through Cisco's website.

Can anyone find anything on Cisco's site?
(other than using a google hack)

[dlots]

I have figured out how to find OSs :-)

[Dieselboy]

Haha thanks guys

I was trying to get the actual Cisco page where it gives you the specs. I wanted to see the Cisco page so there was no discrepancy.

[wintermute000]

To be fair, he was searching through Cisco's website.

Can anyone find anything on Cisco's site?
(other than using a google hack)

I actually got pretty good at the DOC-CD, though IRL 90% of the time I just google it.
But that 10% of the time when the exact exact details are important, I still go straight to the source (i.e. DOC-CD for that exact IOS version).

[Dieselboy]

Except in this case it's RAM.

Looking closer at those outputs it's also CPU. 4 cores but the ASA only gets 1.

I noticed that too. I don't think I've ever seen an ASA CPU above 10%. I wonder if that is stats on the single core, or all four?

[Netwörkheäd]

This makes me want to take a much closer look at our boxes... see if ones on older code have differences from ones on newer code. None of our X models are new enough to ship with SourceFire, but my due diligence bone is starting to ache...

Sent from my SM-N900P using Tapatalk

[deanwebb]

This makes me want to take a much closer look at our boxes... see if ones on older code have differences from ones on newer code. None of our X models are new enough to ship with SourceFire, but my due diligence bone is starting to ache...

Older 5585X: all mem, CPU looks like it's for ASA, running 9.1(3) code
Newest 5525X: ASA gets 1 of 4 CPUs and half the RAM - ver 9.3(2)
Not-so-new 5525X: ASA gets 1 of 4 CPUs and half the RAM - ver 9.1(1)

follow-on edit: ALL my 5525s and 5512s have the half RAM/1 CPU situation, regardless of code version.



Also, for when I talk to Cisco in the vendor booths in a few days:

[deanwebb]

Hey, guess what: it's an old issue!

https://supportforums.cisco.com/discussion/11559081/asa-5515-x-not-addressing-all-cpu-coresmemory

Four years ago, 'twas written:

Code Select Expand

this was a documentation bug... CSCtz55372

[Dieselboy]

Cisco need the back of their hand slapped. Misleading customers tut tut.

[dlots]

That's just wrong :-(
Bad Cisco, give us correct information.

[deanwebb]

I think if more of us posted in the thread linked above, they might do something.

[dlots]

I already put it on my linked in page.

[deanwebb]

Talked with a Palo Alto guy today. They reserve resources for inspection and resources for firewall processing... but you also can't buy a Palo without one or the other. Whereas, I need to follow up with Cisco why they reserve resources for a module that ain't bought.