I faced a similar issue where I can see my ASA Firewall also showing "Current control point elapsed versus the maximum control point elapsed for" 100% and the meaning of this output is not clear, I took help of CIsco TAC to find what does it mean and as per Cisco TAC the 100% is the amount of CPU available to process which is good as per below output.
Break down of per-core data path versus control point cpu usage: Core 5 sec 1 min 5 min Core 0 47.8 (0.0 + 47.8) 49.2 (0.0 + 49.2) 50.1 (0.0 + 50.1)
Current control point elapsed versus the maximum control point elapsed for: 5 seconds = 100.0%; 1 minute: 99.7%; 5 minutes: 100.0%
CPU utilization of external processes for: 5 seconds = 0.0%; 1 minute: 0.0%; 5 minutes: 0.0%
Total CPU utilization for: 5 seconds = 47.8%; 1 minute: 49.3%; 5 minutes: 50.1%
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...