Outside office worker -> Cisco Anyconnect client -> ASA Firepower 1000 series with VPN (gets credentials/usernames of outside office worker from Azure AD, validates that the user and password are correct and authenticates the outside office worker) -> outside worker establishes VPN connection to the Office environment.Īuthentication with on premises Active Directory Domain Controller (old situation) Local on premises domain controller is phased out and this functionality to look up usernames is taken over by Azure AD. Is it possible to use this article to support a scenario (new situation) as listed below ?Īuthentication with Azure AD (new situation) Where can I look for information regarding Azure connectivity for a possible new device? I found this article : which I think enables end users to make use of their login credentials as defined in Azure AD. Here is a screenshot of the WAN performance of the ASA 5506-X 300mbit.Ingram, Thank you for your answers, these were very helpful. Anyone else done speedtesting on it? Let me know your thoughts! In my opinion, I think the 750mbits will not be reached or very difficult to get to as the CPU on the device will be quite high and packets might start getting dropped. If 3 WAN reach 67% CPU, if I did add another link it, the CPU will nearly be maxed out at 400mbits. Upon looking at the Cisco documentation they mention at minimum it will do is 750mbit for firewall performance. This is only with the firewall on, and no other features turned on such as the Firepower. Upon testing and maxing the speed at 300mbit across 3 interfaces, the CPU on the device reached to 67%. Hardware: ASA5506, 4096 MB RAM, CPU Atom C2000 series 1250 MHz, 1 CPU (4 cores)

Here are some of the specs of the 5506-X using show version:

I used the PBR (Policy Based Routing) on the device to and some access lists to forward traffic where I wanted it to go. I got 3 x 100mb WAN links and connected them in and assigned 3 outside interfaces and decided to run a 5GB speedtest file on each link terminating. I recently got the new Cisco 5506-X and I thought to benchmark the WAN speed on it and see what it can actually push.