PIX cpu usage sometimes up to 97% or higher

[Rain_hua2001]

In normal our PIX cpu usage is about 65%, but in this month the pix always have some problem. In one day continually appear up to 97% or the pix down.

The ACL and anti ip snoop config has been added but useless.Dose any one have the same problem? And how to solve this problem?

[hugodrax]

Do a show xlate count and a show conn

do a show perfmon.

see if one of the perfmon counters or other counters look abnormal according to expected patterns in your network.

then do a show conn | grep saA

(displays number of connections in syn state)

a large number indicates problems.

High CPU usually in my experience means a large number of xlates/connections and could possibly be a virus/worm causing a syn attack from internal hosts going out.

65% CPU util is pretty high. What exactly is the PIX you are using and the size of network. I would really open a TAC case if your not experienced in troubleshooting the PIX yet.