topic Re: SFR module going to unresponsive state randomly on ASA5525X in Network Security

SFR module going to unresponsive state randomly on ASA5525X

telecom.vdm — Wed, 13 Mar 2024 21:05:19 GMT

Having trouble with our ASA 5525X.

Every 3 or 4 days, we randomly loose connection between 3 networks zone separated by ASA 5525X.

The only way to bring the communication is to restart the ASA. We are suspecting the SFR module to be the root cause.

Did anyone been facing that king of behaviour?

Thank in advance for your help.

Re: SFR module going to unresponsive state randomly on ASA5525X

balaji.bandi — Wed, 13 Mar 2024 23:30:24 GMT

not that we aware this kind of behavior - may be if we know what ASA code version running and what SFR code version running may be we can see any issue around that version of code.

what is the logs before you reload ASA or SFR ?

check some SFR troubleshooting guide :

https://www.cisco.com/c/en/us/support/security/asa-firepower-services/products-tech-notes-list.html

Re: SFR module going to unresponsive state randomly on ASA5525X

telecom.vdm — Thu, 14 Mar 2024 03:07:17 GMT

Thank for your reply Balaji,

Versions are:

Cisco Fire Linux OS v6.6.1 (build 14)
Cisco ASA5525 v6.6.1 (build 91)

Unfortunately we was'nt able to download logs before restarting the firewall

Re: SFR module going to unresponsive state randomly on ASA5525X

balaji.bandi — Thu, 14 Mar 2024 09:18:52 GMT

set up a syslog server and offload logs.

ASA version code mentioned not valid, check show version.

Re: SFR module going to unresponsive state randomly on ASA5525X

telecom.vdm — Sun, 17 Mar 2024 00:37:44 GMT

Thank you for your time Balaji. Appreciate your reply and suggestions.

Create a TAC case and here are reply:

After analyzing the files, I have found strong evidence in the logs for the following defect https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwd55058

Symptom:

Seeing Snort processes go into a "D" state. Loss in traffic, either entirely, or just partially.