topic Blackout on FTD in Network Security

Blackout on FTD

kostasthedelegate — Mon, 15 Feb 2021 10:52:48 GMT

Hello,

I have two FRP 1010 in HA. There are 3 interfaces (inside, outside and DMZ)

Each day I experience a "blackout" at the outside interface.

The FWs outside interface are connected to a switch which gives internet access and two leased lines.

The FW is directly connected with the switch.

The frequency is daily but not at standard time. The internal lan works fine, along with the DMZ port of the FW.

I have searched for logs in the FMC but I do not find anything.

Also, there are no SLA, time ranges, or QoS policy that would disrupt the flow.

Is there any idea what would be wrong?

Regards,

Konstantinos

Re: Blackout on FTD

Mohammed al Baqari — Mon, 15 Feb 2021 11:10:04 GMT

Hi,

Not sure what do you mean by blackout? Is it up but not passing traffic or
disconnected? Are you sure that its FP interface problem? Did you run a
pcap to see if traffic is leaving the interface or not. It might be switch
problem.

**** please remember to rate useful posts

Re: Blackout on FTD

balaji.bandi — Mon, 15 Feb 2021 11:11:21 GMT

what do you see on the Switch Logs? any STP ? - also suggest configuring the monitoring system if random?

Re: Blackout on FTD

kostasthedelegate — Tue, 16 Feb 2021 06:39:04 GMT

Hello to both,

@balaji.bandi the switch was inspected by another colleague and did not reveal anything. It was also replaced with the same behavior.

@Mohammed al Baqari I myself have not been able to inspect the problem live

I will try to capture traffic while it is happening.

The thing is that those two FTD are replacement for ASA and this is the only change before the problem.

Re: Blackout on FTD

balaji.bandi — Tue, 16 Feb 2021 09:31:36 GMT

until we get more information what status at the switch port also important, also put some monitor system in FW can reach the gateway all time ? do you see any drops, do you see any interface reset at FW ?