High CPU utilsation on PIX-525E.

[astanislaus]

We are running 6.3(5) on Primary and Standby PIX. Due to high CPU utilsation the keepalives between primary and backup are lost for a short while and regained. This is reported by our SYSLOG server.

Around the same time users complain of short disconnectivity issue to the servers through the Firewall.Between 10 and 100 in the morning utilisation reaches 100%.

I am looking for URL or Pointers on how to troubleshoot high CPU utilisation problem on PIX.

Can the process causing the high CPU be detected as in IOS based routers by doing a SHOW TECH?

[hemendoz]

Typical reasons for high CPU on Pix include verbose logging, viruses, or many concurrent connections. Have you noticed a pattern as to when the issue occurs? Is it during peak time? When did the issue first start? If you attach a show tech (please sanitize config) I'll take a look.

[sean]

Try doing a

sh xlate

and see how many translations you have. Excessive translations (virus/worm, file-sharing, etc.) can cause issues.

Hope this helps.

[grant.maynard]

"show conn count" is a good one.

If it's high then log to file, set pager 0 and go for "show local" to find the culprit.