Filter
Top Products
E-73
Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.1
OL-24002-01
Appendix E Troubleshooting
Troubleshooting the ASA 5500-X IPS SSP
The ASA 5500-X IPS SSP and Memory Usage
For the ASA 5500-X IPS SSP, the memory usage is 93%. The default health thresholds for the sensor
are 80% for yellow and 91% for red, so the sensor health will be shown as red on these platforms even
for normal operating conditions. You can tune the threshold percentage for memory usage so that it reads
more accurately for these platforms by configuring the Memory Usage option in the sensor health
metrics.
Note
Make sure you have the Memory Usage option in the sensor health metrics enabled.
Table E-3 lists the Yellow Threshold and the Red Threshold health values.
The ASA 5500-X IPS SSP and Jumbo Packet Frame Size
Refer to the following URL for information about ASA 5500-X IPS SSP jumbo packet frame size:
http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/interface_start.html#wp1328
869
Note
A jumbo frame is an Ethernet packet that is larger than the standard maximum of 1518 bytes (including
Layer 2 header and FCS).
The ASA 5500-X IPS SSP and Jumbo Packets
The jumbo packet count in the show interface command output from the lines
Total Jumbo Packets
Received
and
Total Jumbo Packets Transmitted
for ASA IPS modules may be larger than expected
due to some packets that were almost jumbo size on the wire being counted as jumbo size by the IPS.
This miscount is a result of header bytes added to the packet by the ASA before the packet is transmitted
to the IPS. For IPv4, 58 bytes of header data are added. For IPv6, 78 bytes of header data are added. The
ASA removes the added IPS header before the packet leaves the ASA.
Table E-3 ASA 5500-X IPS SSP Memory Usage Values
Platform Yellow Red Memory Used
ASA 5512-X IPS SSP 85% 91% 28%
ASA 5515-X IPS SSP 88% 92% 14%
ASA 5525-X IPS SSP 88% 92% 14%
ASA 5545-X IPS SSP 93% 96% 13%
ASA 5555-X IPS SSP 95% 98% 17%