

Put a dumb 5 port gigabit switch between the ASA and the internet hand off device. (I know this was mentioned above, but to doublecheck and confirm the global policy)ĭo a "show run policy-map" and confirm that you do not have any police or shape commands (double check the global policy)ĭo a "show run service-policy" a confirm that you do not have any service policies applied to any interfaces.Īnd finally a really dumb trick that worked for me once. I have a lot of sites that use a 5505 and I can confirm that it is able to push 100Mbps on Firmware 9.1.2 It seems to me that a switch with a substantial port/packet buffer is needed to down-convert this connection from 1Gbps to 100Mbps in an optimal fashion. Thank you to everyone for their input and suggestions.Īnother Update - Out of curiousity I tried placing a consumer class, unmanaged 8 port gigabit switch (D-Link DGS-2208) on the outside and my speeds dropped back down to 35Mbps. The penalty that the ISP forces upon you when you have a straight 100Mb connection is pretty severe in this case. So I take this a step further a throw a Cisco 3850 switch in the mix and my download speeds are consistently testing at over 92Mbps now. So i placed an old Dell 5324 gig switch in between the ASA outside interface and the ISP Cable modem and immediately I start getting speedtest speeds around 80Mb down. Update - Issue resolved per fphazer's suggestion. Is this a hardware limitation? I was under the impression that the 5505 should be able to handle up to a 150Mbps throughput (actually 100Mbps since all interfaces are only 10/100).Īnybody else using an ASA 5505 and getting more than 35-40Mbps download speed? I have attempted to hard set the interface to 100/full as well, but that just makes throughput worse. Outside interface is configured for auto-negotiate and is negotiating at 100/Full. I have tried removing any service policies, opening up firewall rules, etc. If i bypass the ASA i get these speeds without issue.

I have a 5505 firewall and recently upgraded our internet to 100Mbps down 20Mbps up.
