Solved

ASA frewall memory reaching high

Posted on 2013-12-11
4
605 Views
Last Modified: 2013-12-25
Dear Team,

My ASA  Firewall is continuously reaching more than 90% every time..

How to prevent from this situation..

In general What are the resources are hogging more memory..I have attached
Memory statistics and Traffic hostory

Pls help

Regards
Ramu
ASA-Memory-statistics.log
0
Comment
Question by:RAMU CH
4 Comments
 
LVL 15

Accepted Solution

by:
WalkaboutTigger earned 200 total points
ID: 39713375
Can you provide a sanitised version of the running-config? - Remove password hashes, pre-shared hashes, and public IP addresses.

Do you have logging, SNMP, or RADIUS enabled?  Do you perform a large volume of traffic inspections?

What model of ASA are you running?

Are you running a VPN or a publicly-facing web server farm behind it?

Did this just start happening, or did it happen after some change you're not knowing about or not remembering?

Was anything added to the environment which could help explain the need for the additional memory resources?

Was the ASA upgraded recently?
0
 
LVL 3

Assisted Solution

by:vyaradaikin
vyaradaikin earned 100 total points
ID: 39713377
Hello.
It could be numerous causes. Firstly, write what model you use, version of ASA IOS loaded on the device and conf file without users/passwords and public IPs.
0
 
LVL 16

Assisted Solution

by:InteraX
InteraX earned 200 total points
ID: 39729746
Hi guys,

There are a number of versions of the ASA code that I have a memory leaks. 7.2.4 was affected pretty badly if I remember correctly, but I may be wrong on that point.

If you have VPNs, some of the earlier code has some bigger issues.

What code are you running and what's memory usage like immediately after boot. Does it then steadily increase over time or is it a very rapid increase?

You can also issue the below command to see where the memory is used.

sh processes memory
0
 
LVL 1

Author Closing Comment

by:RAMU CH
ID: 39739003
Thanks
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Sonicwall SSO 11 60
Allow IP range in sonicwall 1 16
ASA Tunnel 18 31
Access Sonicwall Management Interface from another zone 5 10
I recently had the displeasure of buying a new firewall at one of the buildings I play Sys Admin at. I had to get a better firewall than the cheap one that I had there since I was reconnecting the main office to the satellite office via point-to-poi…
Occasionally, we encounter connectivity issues that appear to be isolated to cable internet service.  The issues we typically encountered were reset errors within Internet Explorer when accessing web sites or continually dropped or failing VPN conne…
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question