high cpu firewall module

alfredoelias — Mon, 11 Mar 2019 20:06:28 GMT

I have high cpu on my firewall module which has the next IOS version FWSM Firewall Version 3.1 (5)
Device Manager Version 5.0 (2) the problem is that if I put an access-list new CPU rises to 75% when the average is 15%. After applying the access-list and wait a while returns to normal CPU. I thank you very much for your help.

Thanks,

Re: high cpu firewall module

mirober2 — Mon, 14 Mar 2011 15:29:36 GMT

Hello,

This is normal behavior for the FWSM platform. When you add or make a change to an access-list, the CPU has to re-compile the entire ACL and then push it down into the network processors who actually evaluate the incoming traffic.

The CPU will rise while this compilation takes place, but the process will constantly yield to other processes so that the compilation process does not affect your traffic.

Hope that helps.

-Mike

topic high cpu firewall module in Network Security

high cpu firewall module

Re: high cpu firewall module