ASA 5555-X high CPU usage

emichrist — Wed, 09 Oct 2019 11:13:27 GMT

Hi!

We have an ASA 5555-X as firewall and our uplink channel is ~350-400 Mbps. And there is very strange thing happen: as more traffic pass through uplink interface as datapath proccesses get big values.

For example right now we have ~200 MBps on uplink and:

asa5555# show processes cpu-usage non
Hardware: ASA5555
Cisco Adaptive Security Appliance Software Version 9.6(3)8
ASLR enabled, text region
PC Thread 5Sec 1Min 5Min Process
0x00007fd7a968c94b 0x00007fd746bb2cd0 0.1% 0.0% 0.0% ssh
- - 26.6% 25.0% 23.9% DATAPATH-0-2314
- - 26.5% 24.7% 23.6% DATAPATH-1-2315

We don't have any specific routes here:

route outside 0.0.0.0 0.0.0.0 <OUR_ISP_IP> 1

I think that it is not normal state for ASA. Or probably i'm wrong?

Re: ASA 5555-X high CPU usage

luis_cordova — Wed, 09 Oct 2019 11:38:45 GMT

Hi @emichrist

I think the first recommendation would be to update your version of IOS.

This is to rule out problems of your current version.

https://software.cisco.com/download/home/284143131/type/280775065/release/9.8.4%20Interim?i=!pp

Regards

topic ASA 5555-X high CPU usage in Network Security

ASA 5555-X high CPU usage

Re: ASA 5555-X high CPU usage