PIX 520 Reboots Every 2 Weeks

[busham]

We have a PIX 520 that reboots itself every 2 weeks at the same time (within seconds).

Does anyone have any suggestions on where to look to see why it is rebooting on a regular basis? We've looked through out config and can't find anything out of the ordinary.

[Patrick Iseli]

This might be because the CPU Load goes to high, for example when a backup is taken via 2 interfaces, because of a bug .... ?? Which version are you using ?

Configure a syslog server and forward all messages with logging level informational. Check the logs after the PIX has rebooted.

Monitoring PIX:

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_chapter09186a0080172797.html#wp1119533

Command reference:

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_command_reference_chapter09186a00801cd841.html#wp1026931

Syslog servers:

http://www.google.ca/search?hl=en&q=syslog+download&btnG=Google+Search&meta=

Kiwi is a good tool to do that.

sincerely

Patrick

[busham]

We actually have 2 of them that are doing it at the exact same time. One is running 6.2(2) and the other is running 6.3(4). The one running 6.2(2) is production.

At first I thought perhaps it was a load issues as well, until I looked at the second one.

The one running 6.3(4) has absolutely no load (neither NIC is plugged in). The PIX is just sitting there running.

The production firewall is reporting to a syslog server. I'll check the logging level. As of the last occurrence we didn't get anything helpful reported.

[jamie.brummell]

Try the 'show crashinfo' command.

[busham]

Thanks for the info, but that comes up as an unrecognized command.

[rsmith]

This may be a little crazy, but what are these PIX520's plugged into for power? We had a site where every Monday morning, a maintenance worker would flip a circuit breaker off/on, and it would shut down everything in a departmental data closet! Took us months to track that down!