Cisco ASA 5520s in Cluster Outside interface stops sending traffic

[Robert Nuss]

Hi,

We are running a Pair of ASA 5520s in active/standby mode.  In the last couple days the active device will just stop communicating on the outside interface.  Because the rest of the interfaces are still up,  it will not fail over, so we have to fail it manually.  The secondary unit works and passes traffic correctly.  We then reboot the Primary. 

Then after some undetermined time,  it happens again and we have to manually fail it the other way,  reboot the affected ASA and wait for it to happen again.

We have a case with TAC but they have not been able to figure this one out.  Has anyone else seen this behavior?

This is the version info:

Cisco Adaptive Security Appliance Software Version 8.4(7)
Device Manager Version 7.3(1)100

Thanks

[Vibhor Amrodia]

Hi,

There are various possibilities on the ASA device which might be causing this issue:-

1) Block depletion

2) Memory depletion

Other things might be related to the external ISP as well.

Can we collect some outputs from the ASA device at the time when the issue is seen on the ASA device.

If you can share the output , i can have a look at it otherwise you can open a TAC case.

Thanks and Regards,

Vibhor Amrodia