RE: [fw-wiz] PIX-515 acceptable CPU usage?
From: Ahmed, Balal (balal.ahmed_at_capgemini.com)
To: "Adam Greene" <email@example.com>, <firstname.lastname@example.org> Date: Thu, 16 Sep 2004 15:03:37 +0100
Some time ago cisco Documentation used to say that if your PIX firewall is
running at 30% sustained utilization then an upgrade is advised. The latest
version of this document  no longer includes a baseline figure. I suppose
the reason for this is that each deployment is different.
I suggest you go back to first principles and monitor your pix to generate a
baseline for yourself e.g.
1) SNMP CPU graphing (using something like mrtg to monitor CPU levels)
2) Monitor/graph latency through the firewall
3) On the pix you could also monitor the memory blocks available (show
blocks) this tells you if there is RAM available for processing 
Having good historical data to hand will help detect and plan upgrade points
better than manually logging on and checking stats sporadically. As we all
know a good set of graphs can help sell the idea to budget controllers.
This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message.
firewall-wizards mailing list