topic Re: PIX randomly stops traffic to DMZ in Network Security

PIX randomly stops traffic to DMZ

dwilkes — Fri, 21 Feb 2020 07:44:39 GMT

I am having an issue with my pix stopping traffic between inside to DMZ web server. Normally, I can get from an inside computer to the web server in the DMZ. Then all of a sudden it stops. The PC's can no longer get to the web server. I have to go to the firewall and do a reload command. Once it restarts, the PC's can get to dmz web server again. A few days later, it does it again. Any ideas?

Thanks ahead of time.

Re: PIX randomly stops traffic to DMZ

nkhawaja — Fri, 12 Nov 2004 23:03:17 GMT

Hi,

what version of PIX? any syslog messages? Can you share the relevant configs (hide the IP)

before you reboot the PIX, can you try

1- "clear xlat"

2- "clear arp"

see if either one resolves the issue

Thanks

Nadeem

Re: PIX randomly stops traffic to DMZ

dwilkes — Mon, 15 Nov 2004 21:14:57 GMT

Clear xlat and clear arp worked.

But I have to keep doing it.

Do you have any idea why?

Thanks alot.

Re: PIX randomly stops traffic to DMZ

nkhawaja — Mon, 15 Nov 2004 21:24:57 GMT

could be couple of reasons. but we need to narrow it down to whether "clear xlat" or "clear arp" is causing it. can you confirm this

Re: PIX randomly stops traffic to DMZ

9s.pappas — Tue, 16 Nov 2004 22:42:48 GMT

What do you get from the following?

show cpu usage

show connection count

Re: PIX randomly stops traffic to DMZ

dwilkes — Wed, 17 Nov 2004 13:45:52 GMT

0% currently on cpu usage

6 in use 41 most used on conn count

Re: PIX randomly stops traffic to DMZ

dwilkes — Wed, 17 Nov 2004 13:47:44 GMT

clear xlat is the one that temporarily resolves the problem. I have to do it about twice a day.

cpu conn count is 6 in use, 41 most used