cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
TCC_2
Advocate
Advocate

Core issue

In the Adaptive Security Appliance (ASA) version 7.1(2), HTTP accounting causes constant high CPU usage.

This issue is documented in Cisco bug ID CSSsd72617.

Secure Sockets Layer (SSL) VPN causes the ASA to freeze when a connected user tries to map a drive or browse the network. The ASA shows that 128MB of memory is used when WebVPN is enabled, but no users are connected.

Resolution

The Access Control List (ACL) used to specify traffic for HTTP accounting must specify the IP pool used for WebVPN. This ACL must not specify all IP addresses. A change to this ACL, in order to specify the IP pool as the source, reduces the CPU utilization to acceptable levels.

As a workaround, upgrade from ASA 7.1(2) to 7.1(2)4. To specify the amount of memory assigned to WebVPN processes, issue the memory-size command under the WebVPN configuration as shown in this example:

hostname(config)# webvpn
hostname(config-webvpn)# memory-size percent

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Quick Links