07-22-2010 12:37 AM - edited 03-11-2019 11:14 AM
Dear All,
There is one Public IP through which someone trying to access FTP Server which located inside my LAN. My query is due to contoneous request for accessing to that Particalar Server, Firewall CPU Utilization going High. Is there any option to reduce Utilization of firewall. access is prohibited for that public IP so im getting huge amount of deny logs on Firewall.
Thank You
07-22-2010 01:57 PM
The best solution for you would be to contact your ISP and have them block the request. This will not only unburden the ASA having to process the request, but also alleviate traffic load on your internet link.
07-22-2010 03:48 PM
If you are downloading too much traffic for the ASA to handle you can also police FTP traffic to a lower traffic throughput so that the ASA is not oversubscribed.
Here is an example of how to police http://supportforums.cisco.com/docs/DOC-1230
I hope it helps.
PK
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: