How do I disable threat-detection?

to see what threat-detection features are enabled issue the command "show run threat-detection"

to disable those features use the "no" keyword before them.

For example

===========================

ciscoasa# sh run threat-detection

threat-detection basic-threat

threat-detection statistics access-list

ciscoasa# conf t

ciscoasa(config)# no threat-detection basic-threat

ciscoasa(config)# no threat-detection statistics access-list

===========================

Thanks,

I tried that but made no difference to the amount of memory being used, how can I show what is taking it all up?

You can try show proc mem.

HTH,

jerry

This is what it shows:

The top two offenders are tmatch compile and dispatch unit. tmatch compile is related to ACLs and dispatch unit related to traffic.

How big are your access lists? (show access-list | i elements)

What is the platform?

How much traffic is going through this box?

Are there drops, errors, overruns or underruns on the interfaces?