topic ASA 5515 reloaded automatically in Network Security

ASA 5515 reloaded automatically

smsdpk — Wed, 17 Jan 2024 12:02:27 GMT

Hi Experts,

The ASA 5515 reloaded automatically and caused multiple route flaps. The customer is requesting a root-cause analysis of why the device rebooted automatically. Could you please to steps to find out the root cause.

Version: Software Version 9.16(4)19

Re: ASA 5515 reloaded automatically

Mark Elsen — Wed, 17 Jan 2024 12:27:25 GMT

- Connect to the ASA device with https://cway.cisco.com/cli
At the top you will find two bottoms : "System Diagnostics" and "Crashdump Analyzer"

Re: ASA 5515 reloaded automatically

smsdpk — Wed, 17 Jan 2024 12:49:34 GMT

Thanks Marce, I have checked the show tech and nothing found in crash log.

Re: ASA 5515 reloaded automatically

smsdpk — Wed, 17 Jan 2024 13:15:07 GMT

Is there any other option to find out the root cause here ?

Re: ASA 5515 reloaded automatically

Mark Elsen — Wed, 17 Jan 2024 13:24:37 GMT

- And what about my initial reply ?

Re: ASA 5515 reloaded automatically

smsdpk — Wed, 17 Jan 2024 13:38:25 GMT

Do you want me to install the software and click on system Diagnostics and Crashdump. Anything else need to capture from there "System Diagnostics" and "Crashdump Analyzer"

Re: ASA 5515 reloaded automatically

Mark Elsen — Wed, 17 Jan 2024 14:01:33 GMT

>..Do you want me to install the software (CLI Analyzer) and click on system Diagnostics and Crashdump.
Yes ,

Re: ASA 5515 reloaded automatically

MHM Cisco World — Wed, 17 Jan 2024 14:49:15 GMT

https://www.cisco.com/c/en/us/support/docs/security/adaptive-security-appliance-asa-software/217663-troubleshoot-asa-or-ftd-unexpected-reloa.html#toc-hId--2070469577

check this

Re: ASA 5515 reloaded automatically

MHM Cisco World — Wed, 17 Jan 2024 14:50:24 GMT

show version <<- if you can access
MHM

Re: ASA 5515 reloaded automatically

Marius Gunnerud — Wed, 17 Jan 2024 14:55:09 GMT

The reload is most likely due to a memory leak. But if you want definitive answer for the cause you should open a TAC case, upload the show tech and crashdump files for them to analyze. They have much better tools for this than we do and can correlate their findings with both public and non-public bugs.