I've deployed a Cisco S100V Web Security Virtual Appliance running AsyncOS 9.1.1 for Web build 074 as described in the following document (250 GB Disk, 6 GB RAM and 2 cores). We also applied the timing quirks fix in the ESX host.
Cisco Content Security Virtual Appliance Installation Guide
Additionally, I'm using transparent redirection with WCCP for HTTP and HTTPS traffic and transparent user identification using CDA.
The problem is that as soon as I start sending traffic to the WSA (about 10 users), the CPU spikes up to 100% and this version is suppose to support more than 2k users.
I would like to know an effective way to troubleshoot CPU utilization in this WSAv (additionally to "status detail" our using the GUI CPU graphics). Is there any other requirement that I should be considering to deploy this appliance?
Any though is highly appreciated.