cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
14270
Views
0
Helpful
2
Comments
secureIT
Level 4
Level 4

How to check ASA Fw Current load

Comments
Taisuke Nakamura
Cisco Employee
Cisco Employee

Please see the following link about interface or traffic or process load.
https://supportforums.cisco.com/document/47506/asa-oversubscription-interface-errors-troubleshooting

  
Additionally, "show process cpu-usage non" command is very useful to check load of each process. DATAPATH(or Dispatch Unit) is a fundamental process for firewalling such as ACL check, xlate check, connection management, etc.

asa# show proc cpu-u non
PC Thread 5Sec 1Min 5Min Process
0x00000000019bd596 0x00007fffec5c62e0 0.0% 0.1% 0.0% telnet/ci
0x000000000199db42 0x00007fffec72b040 0.2% 0.2% 0.2% Logger
0x000000000082d2c6 0x00007fffec71c4a0 3.8% 3.8% 1.8% CP Processing
0x000000000082ce21 0x00007fffec71b9c0 0.1% 0.1% 0.1% CP ARP Processing
0x0000000000bebedc 0x00007fffec715440 0.1% 0.1% 0.1% ARP Thread
- - 31.2% 28.4% 14.6% DATAPATH-0-1575

   

"show cpu detail" command is useful to check CPU load of per-core datapath(DP) vs control point(CP). CP will control high layer function such as failover, syslog, snmp, telnet, etc. 

asa# show cpu detail

Break down of per-core data path versus control point cpu usage:
Core 5 sec 1 min 5 min
Core 0 0.0 (0.0 + 0.0) 0.0 (0.0 + 0.0) 0.0 (0.0 + 0.0)
Apple Mahmud
Level 1
Level 1

How to check APT/IPS/IDS/AMP throughput individual utilization of Cisco ASA with firepower 5516-X.

Please someone up

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: