Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
New Member

AIP-SSM 20 questions

Hi,

we have this module on an ASA 5540, while the inspection load is reaching a max of 35% , the cpu is reaching 100% sometimes.

1- how do i check the current bandwidth in Mbs being inspected ?

2- how do i check if there is drops when cpu is reaching 100%

3-if cpu hangs at 100% will fail-open work or will the module start dropping legitimate packets

4- should i upgrade my card to AIP-SSM 40 allthough inspection load is still 35% ?

Thank you

3 REPLIES
New Member

Re: AIP-SSM 20 questions

Check if you are hitting the bug CSCsw25900.

New Member

Re: AIP-SSM 20 questions

thank you but its not , can anyone answer these questions plz.

Gold

Re: AIP-SSM 20 questions

To check if your sensor is dropping packets, get on the CLI and run

show interface - This will show you an averaged packet loss across all interfaces since last reset and on a per-interface basis.

show event stat past 01:00 inc missed - This will show you any peaks in your missed pckets over the last hour.

190
Views
0
Helpful
3
Replies
CreatePlease to create content