High cpu usage in FTD

[shaikh.zaid22]

Hello,

we are having fts 2110 (A-S) managed by FMC version 7.0.1 since long time without issues. Suddenly today morning we are seeing high cou usage in active FTD exceeding 87percent.

Overtime it got settled on 39%, which i feel is still high.

After executing the top command, i see snort is taking-up 21% of the cpu resource.

Now i dont know how to reduce it or to identify the cause and rectify.

appreciate your guidance

[Rob Ingram]

@shaikh.zaid22 you should upgrade your FTD, the latest cisco recommended version is 7.0.5.

There are a couple of CPU related issues resolved since 7.0.1 https://www.cisco.com/c/en/us/td/docs/security/firepower/70/relnotes/firepower-release-notes-700/bugs.html

https://www.cisco.com/c/en/us/td/docs/security/firepower/70/relnotes/firepower-release-notes-700/bugs.html

[shaikh.zaid22]

Thanks Rob.

But the bug list does not match our case, this bug is for the standby ftd CSCvy78209, in my case we have it for primary ftd.

plus am running this version since more than a year without issues. Is there a way to suppress this snort high usage?

[Rob Ingram]

@shaikh.zaid22 log a call with TAC, who'll probably suggest and upgrade anyway.