I have a serious problem with my corporate firewall, witch is an ASA 5520, fv 8.3, with 8 +1 interfaces.
It suddenly started to crash every 10/20 minutes and rebooting alone.
First of all I checked system resources witch are in a very low usage state.
I also checked interfaces errors, but nothing strange come out o from error counters analisys.
I tried disabling logging and all the service policy rules configured, but nothing changed.
Nothing changed and firewal continue restarting by himself.
Last logs I received before crash were:
%ASA-4-711004: Task ran for 35 msec, Process = Dispatch Unit, PC = 84a619e, Call stack =
%ASA-4-711004: Task ran for 35 msec, Process = Dispatch Unit, PC = 84a619e, Call stack = 0x084A619E 0x084A6512 0x084A70E1 0x084A7987 0x084A7AAA 0x08558B9B 0x08558E8A 0x083D3518 0x083CA145 0x080659D1 0x089196D9 0x08919790 0x089FF711 0x08A27468
Here the sh crashinfo command on module 0, after last reboot:
hread Name: Dispatch Unit
Page fault: Address not mapped
error code 0x00000005
Cisco Adaptive Security Appliance Software Version 8.3(1)
Compiled on Thu 04-Mar-10 16:56 by builders
Crashinfo collected on 11:43:50.787 CEST Mon Feb 28 2011
Any suggestion to find out the problem????
Thank you very much,
My advise would be to open a TAC case so the complete crash dump can be decoded and analysed, and it probably will match a specific bug and software upgrade will be required. TAC should be able to advise you further on the crash.
I have exactly the same problem with an ASA5520 under version 8.4(2) since yesderday;
Did the TAC solve this problem?
at that time we opened a TAC case, and Cisco directly changed our device. This trouble created a big problem in our organization, and nobody still knows why it suddenly happened.
We wasn't so happy to pay for get assistance for something that wasn't related to an our mistake and that happened on a very young device.
Fortunately, since we changed the hardware the problem didn't happen again...
Apparently upgrade to 220.127.116.11 could solve the problem. I will test this solution next week, i'll give you my feedback and tell you if after this upgrade the asa work fine.
We also seem to get this crash, since we updated to 8.2.5(22).
It seems to crash just after replicating the configuration. Only the Standby unit is crashing.
Might also be that the bug CSCtr33228 is also in 8.2.5(22) Previous version was 8.2.4(4) which did not crash.
Here a part of our dump:
Thread Name: Dispatch Unit
Page fault: Address not mapped
error code 0x00000004
Cisco Adaptive Security Appliance Software Version 8.2(5)22
We solved this problem one year ago. Firstable i disabled logs recording and the 5520 immediatly stopped to reboot.
Few weeks later, i upgraded to 8.3(1), i'm not sure it was the best idea i've had, cause syntax of some parts of configuration have changed with this new version. Fortunely all tests were made on a spare 5520 but i had to rewrite all the firewall rules.
Thanks for the quick reply.
We have disabled logs recording in the ASA, we send the logs to a Syslog Server.
We will analyze to upgrade the version.