High CPU on ASA 5585X SSP IPS10

[tiwang]

Hi out there

Just got my attention on this other discussion on hign cpu on ips module - we have a set of 5585x where the ips module (quad core) is showing very high cpu utilization - 75% - according to the IME 3 of the 4 cores are running 100% and the last one is completely idle. The IPS module is not in use yet and besides of configured with management ip and automatic update (and with a inspection load of 0) it is in default setup.

Is this normal behavior of it?

It is running engine 7.1(6)E4 with signatur 693.0

[Thulasi Shankar · Accepted solution]

Hi ,

This is a normal behavior for an IPS sensor.

In  sensor running E3 engine or higher the IPS uses a different algorithm for managing its idle time, and spends more time polling for packets to reduce latency. This results in the CPU usage being reported higher than previous releases.

You can review these statistics using the "show statistics analysis-engine" command.

Also,  on sensor  running  version 7.0(7)E4 or 7.1(5)E4 (or later), you can  check the Inspection Load Percentage value displayed by the 'show  inspection-load' command instead.

Thanks and Regards,

Thulasi Shankar

[tiwang]

ok - thanks

best regards /ti