topic Re: Pix Processor up tp 90% in Network Security https://community.cisco.com/t5/network-security/pix-processor-up-tp-90/m-p/627366#M1030654 <HTML><HEAD></HEAD><BODY><P>The version is 7.0. PIX 515E</P></BODY></HTML> Wed, 27 Dec 2006 07:29:15 GMT KlediBodinaku24 2006-12-27T07:29:15Z Pix Processor up tp 90% https://community.cisco.com/t5/network-security/pix-processor-up-tp-90/m-p/627364#M1030648 <P>This is the output when the proccesor was high. Some of the VPN client users were unable to log in. when those users that were logged in started getting out the proccessor activity started going down until it reached 7%.</P><P></P><P> </P><P></P> Mon, 11 Mar 2019 09:11:24 GMT https://community.cisco.com/t5/network-security/pix-processor-up-tp-90/m-p/627364#M1030648 KlediBodinaku24 2019-03-11T09:11:24Z Re: Pix Processor up tp 90% https://community.cisco.com/t5/network-security/pix-processor-up-tp-90/m-p/627365#M1030651 <HTML><HEAD></HEAD><BODY><P>What version of software are you using in the pix ?</P></BODY></HTML> Tue, 26 Dec 2006 20:36:53 GMT https://community.cisco.com/t5/network-security/pix-processor-up-tp-90/m-p/627365#M1030651 drolemc 2006-12-26T20:36:53Z Re: Pix Processor up tp 90% https://community.cisco.com/t5/network-security/pix-processor-up-tp-90/m-p/627366#M1030654 <HTML><HEAD></HEAD><BODY><P>The version is 7.0. PIX 515E</P></BODY></HTML> Wed, 27 Dec 2006 07:29:15 GMT https://community.cisco.com/t5/network-security/pix-processor-up-tp-90/m-p/627366#M1030654 KlediBodinaku24 2006-12-27T07:29:15Z Re: Pix Processor up tp 90% https://community.cisco.com/t5/network-security/pix-processor-up-tp-90/m-p/627367#M1030656 <HTML><HEAD></HEAD><BODY><P>Mate,</P><P></P><P>How many VPN users were logged in? Does your PIX have a VPN accelerator card (is it Unrestricted PIX)?</P><P></P><P>If you don't have any VPN termination capacity problems then you might need to check your IP Audit logs (if you have configured it). If you don't have it configured I would suggest that you do that on all physical interfaces and set the action to "log" only rather than "block" and then you can monitor if there is any malicious activities from any source.</P><P></P><P>Hope this helps ...</P><P></P><P>Cheers.</P></BODY></HTML> Wed, 27 Dec 2006 16:06:59 GMT https://community.cisco.com/t5/network-security/pix-processor-up-tp-90/m-p/627367#M1030656 scheikhnajib 2006-12-27T16:06:59Z Re: Pix Processor up tp 90% https://community.cisco.com/t5/network-security/pix-processor-up-tp-90/m-p/627368#M1030659 <HTML><HEAD></HEAD><BODY><P>Check for incoming icmp log from hosts configured on the pix. Could be</P><P>- a misconfigured server the pix cannot reach</P><P>- a patch not well applied on syslog-server or snmp-server.</P><P>- misconfgured pix eg wrong ip server-address,</P><P>- port udp/514 not opened on server, etc...</P><P></P><P>Check either the syslog-server and snmp-server.</P><P>As a permanent workaround, enable icmp echo and icmp echo reply for the faulty host.</P></BODY></HTML> Wed, 27 Dec 2006 16:20:47 GMT https://community.cisco.com/t5/network-security/pix-processor-up-tp-90/m-p/627368#M1030659 mpalardy 2006-12-27T16:20:47Z