Symptom
Very intermittent latency of 30-60ms may be experienced in traffic that is redirected to an SFR module on the ASA 5500-X platforms. This latency is seen on approximately .02% of traffic (or 1 in every 5,000 packets). While this is generally unnoticeable, it may impact applications that are especially sensitive to high latency. This latency introduction is expected behavior due to platform-related constraints.
Conditions
This behavior is observed when sending traffic through an SFR module for inspection on an ASA 5500-X platform
Workaround
Exempt the traffic from redirection to the SFR module by denying it in the redirect ACL or use a Prefilter Fastpath rule for the traffic.
