pix 525 high cpu utilization

hbaski — Fri, 21 Feb 2020 07:36:49 GMT

Dear Glen,

The PIX is switching over to failover mode due to high CPU utilization. We Changed the xlate timeout value to 3 hrs. PIX switched over to failover mode thrice in the evening within 1hour duration. We opened a TAC case for the issue. CISCO TAC engineer suggested it is a bug (CSCed59572). We Upgraded the IOS to 6.3.3.133. Utilization was under control. After 2 months the problem again cropped up. TAC engineer suggested The Bug ID has been updated instead of 633.133 it was move in to 633.138.

The TAC engineer decided to provide new version 6.3.4. After upgrading also utilization was high. TAC engineer suggested Turbo-acl. It has come down to 60% from 98%. The xlate-timeout. But currently the site is going to handle 1000 new nodes. Currently they have got 3000 users.

Turbo- ACL is difficult since they change access-list on daily basis.

I am attaching the required log file.Please let me know how I should proceed further.

Re: pix 525 high cpu utilization

nkhawaja — Sat, 04 Sep 2004 18:43:35 GMT

Hi,

Could you provide the output of "show xlat count" & "show conn count". Also "show interface", "show cpu usage", "show proc"

Thanks

Nadeem

Re: pix 525 high cpu utilization

hbaski — Mon, 06 Sep 2004 03:00:00 GMT

Please find the attachments

topic pix 525 high cpu utilization in Network Security

pix 525 high cpu utilization

Re: pix 525 high cpu utilization

Re: pix 525 high cpu utilization