Forum Discussion

ryan_126547's avatar
ryan_126547
Icon for Nimbostratus rankNimbostratus
Feb 28, 2013

ASM causing high CPU on bigip 3600 ltm

Hi all!   We are experiencing high CPU levels on both cores of our BigIP 3600 ltm platform after we applied the only security policy on our ASM to the http class profile on our VIPs. We are trying...
app sec
BIG-IP Access Policy Manager (APM)
security
ryan_126547's avatar
ryan_126547
Icon for Nimbostratus rankNimbostratus
Mar 01, 2013
Thank you for that information, Mike.

 

 

What type of signatures do you have in place for your policies? I dropped Data Guard and the "suggested policies" from what the policy wizard thought would apply to my web application. Right now only have XSS sig in learning mode and CPU seems to be stable around 60%, when normally at this time it would be near 80%.

 

 

How do you go about tweaking what attack signatures you need for an enterprise environment? If I choose all the database and type of web servers I have, the amount of signatures the ASM checks is quite high. This could also account for the high CPU usage.