Unanswered Question
Nov 28th, 2007

It's normal a PIX 525 with 50Mb traffic using more than 50% CPU?

CPU utilization for 5 seconds = 76%; 1 minute: 49%; 5 minutes: 48%

logs are in the attach.


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
jbayuka Wed, 12/05/2007 - 11:56

The PIX has a single CPU to process a variety of tasks; for example, it processes packets and prints debug messages to the console. Each process has its own purpose, and some processes require more CPU time than other processes. Encryption is probably the most CPU-intensive process, so if your PIX passes a lot of traffic through encrypted tunnels, you should consider a faster PIX, a VPN Accelerator Card (VAC) [Part # PIX-VPN-ACCEL] for the PIX, or a dedicated VPN Concentrator, such as the VPN 3000. The VAC offloads the encryption and decryption from the PIX CPU and performs it in hardware on the card. This allows the PIX to encrypt and decrypt 100 Mbps of traffic with 3DES (168-bit encryption).

Refer to Monitor and Troubleshoot PIX 500 Performance Issues for more information



This Discussion