Firewall – How to debug Cisco Firewall ASA “Dispatch Unit” very high CPU utilisation from ASDM

ciscocisco-asafirewall

I have recently had my first firewall installed so I am very new to this whole situation. I am finding that Dispatch unit is becoming overloaded and it would appear to be the reason I get serious bouts of lag on my server.
The firewall has had little configuration apart from me blocking all the ports in "Access Rules" and allowing only the ones the server needs and from where it needs them.

I guess what I am after is assistance with locating the issues causing "Dispatch Unit" to take up all the CPU

Regards

–Edit–

With ASDM statistics I found that packets inbound (peak of 70-100k/sec from <1k/sec normal), traffic inbound (peak of 40-50kbits/sec from <1kbits/sec normal) and CPU all peak at the same time so I am pretty sure it is an attack of some sort but as a beginner with ASA I am not sure how to resolve

Best Answer

The first thing you may check is the traffic through firewall. Please give the result of this command:

show int

show traff

show perfmon

to determind what traffic cause your problem.

Using CLI, don't using ASDM (And I never use it), it makes your ASA load increase.

Related Topic