cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
430
Views
0
Helpful
1
Replies
Highlighted
Beginner

IPS 4260 capacity

I have a 4260 with the latest software and I know it is rated at 1 - 2 Gbps (transactional / media rich) throughput.  I have it monitoring a 400 Mbps pipe that is pretty well maxed out at 400 down and 100 up during peak times for a total of 500 Mbps throughput.  My CPU Usage shown in the 4260 management GUI gets as high as 80% at peak times.  Should it be that high for this unit with that amount of traffic?

Everyone's tags (4)
1 REPLY 1
Cisco Employee

IPS 4260 capacity

Hi,

Thanks for positng. Actually when you are talking about traffic through the box and the performace of the IPS, you should focus on the "Inspection load". If the inspection load is too high you will start seen missed packets and overruns on the interfaces.

Chances are that maybe with low amount of traffic the CPU can be high since it handles many process and it uses a different algorithm to calculate the value.

I recommendation will be to focus on the inspection load.

Luis Silva

Luis Silva