Upgraded FTD code on SM-44 inside a 9300 to 6.6.5.1 from 6.6.1. FXOS version is 2.8.1.143. After FTD upgrade and placing interfaces back inline, we instantly experienced large packet loss going south to north and vice versa through all interfaces on this FTD.
I also upgraded an identical SM-44/9300 device, just at a different location, to the same 6.6.5.1 release, and am not seeing any traffic loss issues there. That device is handling the same type of traffic as the errant device.
Pcaps from firewall south of the FTD heading north to router shows BGP keepalives and TCP retransmits. No issues with an errant Intrusion policy dropping legit traffic.
Working with TAC now, just curious if anyone has any ideas. Initial TAC review did not find anything out of order, partially because the errant device is currently not inspecting traffic. Will need to place it back inline to replicate the issue and resume live troubleshooting.
