How to protect CPU on ASA if ASA get more traffic

[jewfcb001]

Hi All ,

We see CPU high on Cisco ASA5555 and We found SIEM configure incorrect some parameter so many log generate via firewall.

Cisco ASA deny log . I'm not sure this situation Can we protect on Cisco ASA ? 
Please advise me.

[balaji.bandi]

First start with disabling Logs and see if that minimise the CPU high to normal

then short the rules and understand the rules which is required and which is not required - this required more of internal understand how you have done the setup of policies.

[jewfcb001]

@balaji.bandi 

I mean deny log happening from  because  Source IP and Dest IP didn't configure on ASA  It's correct but We see interface on ASA It's low bandwidth. Can we protect ASA on this situation ? I'm not sure. Do you understand what I mean?