Re: [fw-wiz] PIX 535: High CPU, High-Latency

Specifically, what are the impacts of high
CPU utilization on this platform? What are the implications of CPU
levels exceeding 80-90%?

Dropped packets and possible reboot of the firewall (the latter one came
from personal experience of a pix 525).

Kevin M. Horvath
SAIC - IT Security Division

-----Original Message-----
From: firewall-wizards-bounces@xxxxxxxxxxxxxxxxxxxxxxx
[mailto:firewall-wizards-bounces@xxxxxxxxxxxxxxxxxxxxxxx] On Behalf Of
Matthew Stansel
Sent: Wednesday, October 11, 2006 1:37 PM
To: firewall-wizards@xxxxxxxxxxxxxxxxxxxxx
Subject: [fw-wiz] PIX 535: High CPU, High-Latency

Has anyone discovered and a reliable source of information regarding
performance or operational parameters for Cisco PIX firewalls? That is,
acceptable limits for the various resources utilized, CPU, memory,
interface saturation, etc. Specifically, what are the impacts of high
CPU utilization on this platform? What are the implications of CPU
levels exceeding 80-90%.

Many thanks,

Matthew A. Stansel
Office of Information Security, ITS
Yale University
100 Church St. South, Ste. 107
New Haven CT 06519
Land: 203.737.5260
Mobile: 203.623.3747

HIPAA notice:
The information contained in this message may be privileged and
confidential. If you are NOT the intended recipient, please notify the
sender immediately with a copy to and destroy this
message. Please be aware that email communication can be intercepted in
transmission or misdirected. Your use of email to communicate protected
health information to us indicates that you acknowledge and accept the
possible risks associated with such communication. Please consider
communicating any sensitive information by telephone, fax or mail. If you do
not wish to have your information sent by email, please contact the sender

firewall-wizards mailing list
firewall-wizards mailing list

Relevant Pages

  • Re: Question on interpreting nmon
    ... The number of active cpu processes is way too high for this system. ... If you have received this communication in error, ... confidential and privileged information for the use of the designated recipients ...
  • Re: Integration of the right kind is finally upon us.
    ... It is fascinating to me that the term "communication" does not ... major computer architectures in use today. ... didn't the Trasnputer require programming in Occam and didn't support the more popular programming languages? ... But if they had been successful, it is easy to see them transforming the system to CMOS, probably first as a set of chips per CPU, later as a single chip per CPU. ...
  • Re: Why INFINITE loop in a thread occupy so much CPU time??
    ... dynamic priority adjustment, and so forth. ... This is really a Windows thing rather than a programming problem. ... It depends on what you call "CPU Utilization" too. ...
  • Re: Scheduler fairness problem on 2.6 series
    ... I am working on a load balancing class using mpi. ... |> tested) cluster overhead is just as low as 3% to 5%, ... Or that the cpu is ... just for making it clear and final communication:) ...
  • lies, d***ed lies and statistics
    ... CPU utilization 100% ... The information contained in this communication (including any ... For IBM-MAIN subscribe / signoff / archive access instructions, ... send email to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO ...