Virtual WSA sizing

[svenus]

Hi,

  Anyone able to guide through a few sizing numbers for S300v/S600v/S1000v?

  Currently under an incident that the 4 x S300v keeps crashing under a certain load and TAC believes it is the loading issue.  However, they don't follow up with the recommendation as they said their job is break-fix. 

Thanks.

[fw_mon · Accepted solution]

Hello @svenus 

use sizing calculator https://fwm.cisco.com/wsademo.do?#wsa_menu_1:1 

Please use the Cisco Sizing Calculator https://fwm.cisco.com/wsademo.do?#wsa_menu_1:1 to determine appropriate sizing. I can confirm what TAC mentioned: there are several bugs that occur under specific conditions once a certain load level is exceeded. To prevent these issues, use a larger vSWA model to maintain a low load. 

[amojarra]

Hello @svenus 

there are couple of things which please allow me to share:

The Sizing, is not just related to number of requests, it is related to requests types as well, 

For Example : Decryption Rate, Authentication Type, Authentication Surrogate, Scanning Engines, File Scan criteria and, how you redirect the traffic, Spoofing, number of policies, Regular expressions and ...

Being said that, To do the sizing, we  need to have some overview of the network, policies and ... that is the reason TAC is not able to advise.

you can contact your Account Manager, thy will arrange corresponding team to contact you and do the Sizing. 

 Regarding: "keeps crashing under a certain load" do you observe high CPU load? or Slow GUI/CLI?

in general maximum supported Client Connections OR server Connections is 60,000 and should not be above them 

It is best to keep them on maximum 50,000.

you can check them from SHD logs : 

https://www.cisco.com/c/en/us/support/docs/security/secure-web-appliance/220446-troubleshoot-secure-web-appliance-perfor.html

Also please allow me to share the best practice guide : 

https://www.cisco.com/c/en/us/support/docs/security/secure-web-appliance/220375-use-secure-web-appliance-best-practices.html

Regards,

Amirhossein Mojarrad

+++++++++++++++++++++++++++++++++++++++++++++++++++

++++        If you find this answer helpful, please rate it as such      ++++

+++++++++++++++++++++++++++++++++++++++++++++++++++