Hello,
We have 2 Cisco ASA 5510's running on ASA version 8.3.1 and with 1024MB RAM. They are setup in an Active/Standby failover.
There seems to be an issue with our secondary ASA. It has occurred alot of times already that whenever the Secondary ASA becomes the active firewall, its CPU spikes to 90 - 100% and remains steady on that value. If I open the ASDM graphs I see a steady horizontal line at 240MB of RAM so it is not running out of memory. Our entire rack of servers becomes unavailable and I can barely troubleshoot what is going on. This only happens on the Secondary ASA. I have never seen it happen on the Primary one. Whenever this happens I can see there are only around a 100 connections per second, while the ASA 5510 should be able to handle 9000 connections per second at max. I don't understand why this, and only this box, has so many CPU issues.
I am unable to perform a "show process cpu-usage" command, because every key stroke or every mouseclick takes about a minute to get through. All I do is issue a failover command so the Primary ASA becomes the Active one again and the CPU usage immediately drops to 15 - 20% and all is well again.
Any hint in the right direction to solve this mystery would be very much appreciated.
