topic Re: asa cpu high load in Network Security https://community.cisco.com/t5/network-security/asa-cpu-high-load/m-p/1698002#M557296 <HTML><HEAD></HEAD><BODY><P>Thank you! It works!</P></BODY></HTML> Mon, 25 Apr 2011 20:48:31 GMT Vyacheslav_Maliev 2011-04-25T20:48:31Z asa cpu high load https://community.cisco.com/t5/network-security/asa-cpu-high-load/m-p/1698000#M557290 <P>Hi!</P><P>Yesterday we had some troubles with ASA 5505 when there was a ddos attack of the web server behind. Tons of TCP request on port 80 were flooded from different networks and the asa firewall got freeze because of 100% cpu load. We tried to prevent this flooding by ACL, but ASA was still freezeng and neither vpn and internet access worked. Is there any solution to mtitgate this volnurability?</P> Mon, 11 Mar 2019 20:24:33 GMT https://community.cisco.com/t5/network-security/asa-cpu-high-load/m-p/1698000#M557290 Vyacheslav_Maliev 2019-03-11T20:24:33Z Re: asa cpu high load https://community.cisco.com/t5/network-security/asa-cpu-high-load/m-p/1698001#M557292 <HTML><HEAD></HEAD><BODY><P>Hi Maliev,</P><P></P><P>You can limit the number of TCP embryonic connections that can be formed to the server. This way they won't be able to open so many connection that the ASA gets over-burdened.</P><P></P><P><SPAN>Kindly refer to this document: </SPAN><A class="jive-link-external-small" href="http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00809763ea.shtml#sol">http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00809763ea.shtml#sol</A></P><P></P><P>Hope this helps.</P><P></P><P>-Shrikant</P><P></P><P>P.S.: Please mark the question as answered if it has been resolved. Do rate helpful posts. Thanks.</P></BODY></HTML> Thu, 21 Apr 2011 12:36:01 GMT https://community.cisco.com/t5/network-security/asa-cpu-high-load/m-p/1698001#M557292 Shrikant Sundaresh 2011-04-21T12:36:01Z Re: asa cpu high load https://community.cisco.com/t5/network-security/asa-cpu-high-load/m-p/1698002#M557296 <HTML><HEAD></HEAD><BODY><P>Thank you! It works!</P></BODY></HTML> Mon, 25 Apr 2011 20:48:31 GMT https://community.cisco.com/t5/network-security/asa-cpu-high-load/m-p/1698002#M557296 Vyacheslav_Maliev 2011-04-25T20:48:31Z