06-26-2006 08:31 PM - edited 03-09-2019 03:24 PM
06-26-2006 08:35 PM
We are running 6.3(5) on Primary and Standby PIX. Due to high CPU utilsation the keepalives between primary and backup are lost for a short while and regained. This is reported by our SYSLOG server.
Around the same time users complain of short disconnectivity issue to the servers through the Firewall.Between 10 and 100 in the morning utilisation reaches 100%.
I am looking for URL or Pointers on how to troubleshoot high CPU utilisation problem on PIX.
Can the process causing the high CPU be detected as in IOS based routers by doing a SHOW TECH?
06-29-2006 06:50 AM
Typical reasons for high CPU on Pix include verbose logging, viruses, or many concurrent connections. Have you noticed a pattern as to when the issue occurs? Is it during peak time? When did the issue first start? If you attach a show tech (please sanitize config) I'll take a look.
06-29-2006 07:22 AM
Try doing a
sh xlate
and see how many translations you have. Excessive translations (virus/worm, file-sharing, etc.) can cause issues.
Hope this helps.
06-29-2006 07:28 AM
"show conn count" is a good one.
If it's high then log to file, set pager 0 and go for "show local" to find the culprit.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: