Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

CPU utilization of The ASA 5520 in my company suddenly increased to 98% for 2 hour. In this time, I have checked the logs:

Logs

Deny TCP reverse path check from 121.65.98.4 to 180.85.66.54 on interface inside

I canceled download in a PC, then the problem is resolved.

Could you please tel me what should I do that I will not faced with this problem for future.

share|improve this question

migrated from security.stackexchange.com Aug 21 '13 at 6:24

This question came from our site for information security professionals.

    
Questions about general computing hardware and software are off-topic here, but can be asked on Super User. – Lucas Kauffman Aug 21 '13 at 4:44

That's not the entire log message, and that's not necessarily the main cause of your CPU problems.

PIX/ASA messages each have a unique code, in this case it's %PIX-1-106021 which you can look up in the documentation (e.g for v6.3).

Similarly if you look up reverse path check you will see that this problem is cause by either your firewall topology or routing being wrong, or a spoofed external IP address on the inside.

The trivial solutions (turn off verify with no ip reverse-path on an interface, or turn off that log message with no logging message 106021) are usually a bad idea.

This is probably a better starting point: PIX/ASA: Monitor and Troubleshoot Performance Issues

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .