Protect wan interface from Flood attacks in ASA

[Han Ni Aung]

how to prevent and configure my wan interface from flood attack in ASA Firewall [5500 Series].
I also tried to use icmp deny any outside and tired to test with kali.
ASA denied traffic and but cpu usage is 80% and device is harmful.
PLease share if there are ways to solve for icmp flood and tcp flood attacks.

[balaji.bandi]

Not sure how your configuration looks like - lets start from below :

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/100830-asa-pix-netattacks.html