topic Re: ASA on Firepower 2140 - High CPU usage in Network Security https://community.cisco.com/t5/network-security/asa-on-firepower-2140-high-cpu-usage/m-p/4939707#M1104999 <P>Processes CPU usage is not normal, because it is displayed incorrectly in this version due to CSCvt15348. Actually, it is very high in datapath. This can be caused by high pps rate or high drop rate, so you need to collect "clear traffic" / "show traffic" (once, but wait 1 minute after clearing) and "clear asp drop" / "show clock" + "show asp drop" (thrice) (to see how drops increase over time).</P><P>You're running out of 1550B and 80B blocks. The former can be attributed to high CPU. The latter is a bug. Do you encrypt failover link with IPsec? Provide "show run failover".</P><P>Conn rate, ACL size, number of xlates is small for this platform.</P><P>&nbsp;</P><P>&nbsp;</P> Fri, 13 Oct 2023 09:10:49 GMT tvotna 2023-10-13T09:10:49Z ASA on Firepower 2140 - High CPU usage https://community.cisco.com/t5/network-security/asa-on-firepower-2140-high-cpu-usage/m-p/4939343#M1104977 <P>We are seeing a high CPU usage on our network firewall. Does anyone know what the DataPath process is for?</P> Wed, 15 Nov 2023 14:59:19 GMT https://community.cisco.com/t5/network-security/asa-on-firepower-2140-high-cpu-usage/m-p/4939343#M1104977 NetworkNinjaAC 2023-11-15T14:59:19Z Re: ASA on Firepower 2140 - High CPU usage https://community.cisco.com/t5/network-security/asa-on-firepower-2140-high-cpu-usage/m-p/4939366#M1104983 <P>&nbsp;</P> <P>&nbsp;- FYI :&nbsp;<A href="https://community.cisco.com/t5/network-security/commands-for-troubleshooting-high-cpu/m-p/4573402#M1088424" target="_blank">https://community.cisco.com/t5/network-security/commands-for-troubleshooting-high-cpu/m-p/4573402#M1088424</A></P> <P>&nbsp;M.</P> Thu, 12 Oct 2023 16:46:32 GMT https://community.cisco.com/t5/network-security/asa-on-firepower-2140-high-cpu-usage/m-p/4939366#M1104983 Mark Elsen 2023-10-12T16:46:32Z Re: ASA on Firepower 2140 - High CPU usage https://community.cisco.com/t5/network-security/asa-on-firepower-2140-high-cpu-usage/m-p/4939368#M1104984 <P>what kind of traffic this FW handling?</P> <P>&nbsp;</P> Thu, 12 Oct 2023 16:54:02 GMT https://community.cisco.com/t5/network-security/asa-on-firepower-2140-high-cpu-usage/m-p/4939368#M1104984 balaji.bandi 2023-10-12T16:54:02Z Re: ASA on Firepower 2140 - High CPU usage https://community.cisco.com/t5/network-security/asa-on-firepower-2140-high-cpu-usage/m-p/4939375#M1104986 <P>It sits at the perimeter of the network so all traffic traverses through it.</P> Thu, 12 Oct 2023 17:05:26 GMT https://community.cisco.com/t5/network-security/asa-on-firepower-2140-high-cpu-usage/m-p/4939375#M1104986 NetworkNinjaAC 2023-10-12T17:05:26Z Re: ASA on Firepower 2140 - High CPU usage https://community.cisco.com/t5/network-security/asa-on-firepower-2140-high-cpu-usage/m-p/4939671#M1104996 <P><SPAN>what kind of traffic this FW handling?&nbsp; &nbsp;- i mean bandwidth wise, ? post interface output how much utilization.</SPAN></P> Fri, 13 Oct 2023 08:12:17 GMT https://community.cisco.com/t5/network-security/asa-on-firepower-2140-high-cpu-usage/m-p/4939671#M1104996 balaji.bandi 2023-10-13T08:12:17Z Re: ASA on Firepower 2140 - High CPU usage https://community.cisco.com/t5/network-security/asa-on-firepower-2140-high-cpu-usage/m-p/4939707#M1104999 <P>Processes CPU usage is not normal, because it is displayed incorrectly in this version due to CSCvt15348. Actually, it is very high in datapath. This can be caused by high pps rate or high drop rate, so you need to collect "clear traffic" / "show traffic" (once, but wait 1 minute after clearing) and "clear asp drop" / "show clock" + "show asp drop" (thrice) (to see how drops increase over time).</P><P>You're running out of 1550B and 80B blocks. The former can be attributed to high CPU. The latter is a bug. Do you encrypt failover link with IPsec? Provide "show run failover".</P><P>Conn rate, ACL size, number of xlates is small for this platform.</P><P>&nbsp;</P><P>&nbsp;</P> Fri, 13 Oct 2023 09:10:49 GMT https://community.cisco.com/t5/network-security/asa-on-firepower-2140-high-cpu-usage/m-p/4939707#M1104999 tvotna 2023-10-13T09:10:49Z Re: ASA on Firepower 2140 - High CPU usage https://community.cisco.com/t5/network-security/asa-on-firepower-2140-high-cpu-usage/m-p/4939745#M1105000 <P>Datapath sometimes is big problem.&nbsp;</P> <P>Usually Datapath is for VPN (s2s or anyconnect).&nbsp;</P> <P>If you can open TAC with cisco it better and fast way to know why these processes utilize your FW CPU.&nbsp;</P> Fri, 13 Oct 2023 09:16:31 GMT https://community.cisco.com/t5/network-security/asa-on-firepower-2140-high-cpu-usage/m-p/4939745#M1105000 MHM Cisco World 2023-10-13T09:16:31Z Re: ASA on Firepower 2140 - High CPU usage https://community.cisco.com/t5/network-security/asa-on-firepower-2140-high-cpu-usage/m-p/4939859#M1105007 <P>oh ok sorry for misunderstanding, this was this morning with low traffic and cpu at 50%:</P><P>&nbsp;</P> Wed, 15 Nov 2023 15:23:20 GMT https://community.cisco.com/t5/network-security/asa-on-firepower-2140-high-cpu-usage/m-p/4939859#M1105007 NetworkNinjaAC 2023-11-15T15:23:20Z