ASA 5555-X high CPU usage

[emichrist]

Hi! 

We have an ASA 5555-X as firewall and our uplink channel is ~350-400 Mbps. And there is very strange thing happen: as more traffic pass through uplink interface as datapath proccesses get big values.

For example right now we have ~200 MBps on uplink and:

asa5555# show processes cpu-usage non
Hardware: ASA5555
Cisco Adaptive Security Appliance Software Version 9.6(3)8
ASLR enabled, text region 
PC Thread 5Sec 1Min 5Min Process
0x00007fd7a968c94b 0x00007fd746bb2cd0 0.1% 0.0% 0.0% ssh
- - 26.6% 25.0% 23.9% DATAPATH-0-2314
- - 26.5% 24.7% 23.6% DATAPATH-1-2315

We don't have any specific routes here:

route outside 0.0.0.0 0.0.0.0 <OUR_ISP_IP> 1

I think that it is not normal state for ASA. Or probably i'm wrong?

[luis_cordova]

Hi @emichrist 

I think the first recommendation would be to update your version of IOS.

This is to rule out problems of your current version.

https://software.cisco.com/download/home/284143131/type/280775065/release/9.8.4%20Interim?i=!pp

Regards