ASA makes ping erratic with high times

[kh.farhad]

Hi,

I'm having a problem with asa, when the scanning threat detection is enable after some time ping time of hosts to outside becomes unstable and so high. I checked that when i disable the feature it becomes stable for some time. I have enabled shun but even when I see scanning syslogs no address is shunned. How can I use the feature without problem?

Thank you.

[Philip D'Ath]

What model ASA do you have and what software version are you running?

[Tagir Temirgaliyev]

see here

http://www.cisco.com/c/en/us/support/docs/security/pix-500-series-security-appliances/22040-pixperformance.html

and provide

show xlate count

show memory detail

show processes cpu-hog

show processes memory

• show proccess cpu-usage sorted non-zero

[kh.farhad]

Hi,

Sorry for my delay, it's asa 5515-x firepower with 9.6 os.

here're the show results:

ciscoasa# sh xlate count
2121 in use, 5541 most used