Cisco 7604 Configuration Guide - Page 619

Appendix A Specifications Managed System Resources Table A-5 Managed System Resources (continued) Context Mode Specification Single Multiple Inspection engine connections, 10,000 per second 10,000 per second divided between all contexts rate IPSec management 5 connections, concurrent 5 per context Maximum of 10 divided between all contexts ASDM management sessions, 5 concurrent1 Up to 5 per context Maximum of 80 divided between all contexts NAT translations (xlates), concurrent 262,144 262,144 divided between all contexts SSH management connections, 5 concurrent2 5 per context Maximum of 100 divided between all contexts System log messages, rate TCP or UDP connections3 4 between any two hosts, including connections between one host and multiple other hosts, concurrent and rate 30,000 per second for messages sent to the FWSM terminal or buffer 25,000 per second for messages sent to a syslog server 999,9005 100,000 per second 30,000 per second divided between all contexts for messages sent to the FWSM terminal or buffer 25,000 per second divided between all contexts for messages sent to a syslog server 999,900 divided between all contexts5 100,000 per second divided between all contexts Telnet management 5 connections, concurrent2 5 per context Maximum of 100 connections divided between all contexts. 1. ASDM sessions use two HTTPS connections: one for monitoring that is always present, and one for making configuration changes that is present only when you make changes. For example, the system limit of 80 ASDM sessions represents a limit of 160 HTTPS connections. 2. The admin context can use up to 15 Telnet and SSH connections. 3. Embryonic connections are included in the total number of connections. If you configure an embryonic connection limit, then embryonic connections above the limit are not counted. 4. The FWSM might take up to 500 ms to remove a connection that is marked for deletion. Because any traffic on the connection is dropped during this period, you cannot initiate a new connection to the same destination using the same source and destination ports until the connection is deleted. Although most TCP applications do not reuse the same ports in back-to-back connections, RSH might reuse the same ports. If you use RSH or any other application that reuses the same ports in back-to-back connections, the FWSM might drop packets. 5. Because PAT requires a separate translation for each connection, the effective limit of connections using PAT is the translation limit (256 K), not the higher connection limit. To use the connection limit, you need to use NAT, which allows multiple connections using the same translation session. OL-20748-01 Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM A-5