High CPU usage in Juniper VPN - RSA Authentication Manager
2 years ago
Originally Published: 2014-05-05
Article Number
000048455
Applies To
RSA Authentication Manager 7
Issue
When a Juniper VPN is configured to use SecurID authentication it can experience high CPU usage.
Cause
The issue is a result of how Juniper has implemented the RSA API.  The RSA library spawns a netstat process during initialization.
It is recommended they spawn the library in a thread and leave it running but instead Juniper spawns a process that invokes the library and then closes it and they do this for every user authentication.

This results in the netstat processes building up and not terminating for an extended amount of time which in turn contributes to high CPU usage.


Resolution
RSA has released a hotfix in API version 8.1.2.535. The hotfix mitigates but does not fully resolve the issue.