topic Periodic network failure in Network Security

Periodic network failure

khyron1969 — Tue, 12 Mar 2019 07:43:30 GMT

I am attempting to debug a lost connection issue with my ASA 5512-X. All traffic to the outside world ceases until a system reload takes place.

It sounds like the SSD in the

Philip D'Ath — Mon, 09 May 2016 02:54:18 GMT

It sounds like the SSD in the firewall has failed.

%ASA-3-341008: Storage device not found.

If you have a support contract, like Cisco SmartNet, then contact Cisco TAC to arrange an RMA.

Otherwise I would just remove the SSD. It is on the front right hand side. Just pull it out.

Thank you for the response...

khyron1969 — Mon, 09 May 2016 14:35:37 GMT

Thank you for the response...

I don't actually have an SSD installed...I believe there is a boot disk, but I think that is internal to the unit.

I forgot to mention one other important detail...when the flow of traffic outbound stops, it does resume at a later point in time--there is no pattern to the time. But during the day, I cannot wait so I have been doing a system reload.

I initially thought the ASA was shunning traffic, but the same issues occur even after basic threat detection has been turned off.

For example, last night:

Off at 6:57PM, back on at 9:12PM (135 minutes)

Off at 10:23PM, back on at 1:13AM (170 minutes)

Off at 4:01AM, back on at 5:13AM (72 minutes)

Off at 6:23AM...I did a system reload at this point.

There doesn't seem to be any pattern to the UP or Down sequence. Please note, these OFF / ON times I am reporting are from a Power Company device...we are sent emails notifying us when our equipment loses it's connection to their server...when the net goes up or down they send us an email. I cannot physically tell by reviewing the ASA logs when the connection is lost. When the net is down, through the GUI interface, all interfaces are showing as UP...and there are no logged messages higher than ERROR.

Thanks again and take care,

John

This could still be so many

Philip D'Ath — Mon, 09 May 2016 19:30:29 GMT

This could still be so many things.

Perhaps one of the circuits are going down.

Perhaps try leaving a continuous ping going from inside your network to the inside oft he firewall, and see if that shows packet loss.

Perhaps use an external monitoring service, and leave a ping going to your firewall's outside interface, and to the default route of the firewall, so you can see if it is the circuit going down.

Last night I removed the ASA

khyron1969 — Thu, 12 May 2016 21:25:27 GMT

Last night I removed the ASA 5512-X and replaced it with my old SA520...I am noticing the same failures with the exception that the SA520 comes back up within a minute or two compared to several hours with the ASA 5512.

I put a call into Frontier Communications to see if there is something else wrong on their side...

Moving discussion to the

Glenn Martin — Thu, 12 May 2016 23:18:53 GMT

Moving discussion to the appropriate community.