Hello Lukeprimm,Apologies for the delay in replying.The 4215 only works in IDS mode, no IPS, so it can only work in promiscous mode not in Inline mode, Unless you get a 4FE PCI card please check:http://www.cisco.com/en/US/docs/security/ips/5.0/config...
Hello Lukeprimm,Yes true you shouldn't used the SSM used in your live envirnoment because while configuring the device you can easily get the CPU to go up to 100% which can cause problems if your SSM was implemented in Inline mode.If you want to prac...
I totally agree with mvsheik123 do u have a lengthy outside acl? I would say check what process is consuming the CPU and based on that we will see what can b done!
Since it is showing that traffic encode/decode is increasing, I would say that you should check your traffic on the other peer, and check other peers traffic on your Firewall, since statistics are increasing, most probably the problem is not with you...