topic Re: What is Current control point in ASA in Network Security

What is Current control point in ASA

rami.saber — Mon, 11 Mar 2019 20:06:18 GMT

Hi,

We have an ASA 5580 and under show cpu usage detailed there is the following:

Current control point elapsed versus the maximum control point elapsed for:
5 seconds = 66.7%; 1 minute: 66.7%; 5 minutes: 66.7%

What does this indicate, I tried searching through cisco documents but didn't reach anything. After a sudden power faliuer slowness occured in the network, I found these values spike to 98% and I needed to confirm if it is related to the issue. We are know working on the standby ASA which has the above values. I am suspecting after rebooting the Active ASA it will work fine.

Thanks

Re: What is Current control point in ASA

csaxena — Mon, 14 Mar 2011 10:20:41 GMT

Hello Rami,

This the output of show cpu usage, the below mentioned output suggests average CPU usage over the last 5s, 1min & 5min.

"5 seconds = 66.7%; 1 minute: 66.7%; 5 minutes: 66.7%"

This is because of no. of processes running on the firewall. You may see the processes running and individual CPU usage also on the firewall. CPU usage is usually more because of logging, snmp polling, threat detection, peak hours with excess traffic, etc.

Reply back with the version, output of "show cpu" & "show process" to help you with more info.

Hope this helps. Please reply back if you need any further assistance.

Regards,
Chirag
P.S.: Please mark this thread as answered if you feel your query is answered. Do rate helpful posts.

Re: What is Current control point in ASA

rami.saber — Mon, 14 Mar 2011 11:20:35 GMT

Hi Chirag

Thanks for your reply

The version is 8.3(1).

What is the difference between show cpu usage

CPU utilization for 5 seconds = 1%; 1 minute: 1%; 5 minutes: 1%

And show cpu detailed,

Current control point elapsed versus the maximum control point elapsed for:
5 seconds = 66.7%; 1 minute: 66.7%; 5 minutes: 66.7%

When the issue occured the CPU utilization was normal but the current control point was in the 90's.

All above outputs are from the standby ASA,

Thanks