PIX crash when high traffic pass from inside to dmz

[concurrent]

After upgrade to PIX 7.1.1, some reason PIX freeze the traffic for at least 5min when very large amount of data going from inside interface to DMZ interface. However, DMZ interface has VLAN configure. Did any of you come of cross this problem.

Any help will appreciated

[m.singer]

This might be due to the memory requirement in the PIX .

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_qanda_item09186a00805b87d8.shtml

[concurrent]

I do have 128 MB RAM which require for PIX 515

[travis-dennis_2]

Is this a 515 or a 515E? There were some issues a few years agao with 515s that were using a particular type of NIC where the manufacturer changed chipsets mid-production and didn't tell Cisco and what you are describing was one of the issues that resulted. Not saying this is the cause without more info. How old is this PIX and where did the NIC for the DMZ come from?

[concurrent]

This is PIX 515. It is about 5 years old. The DMZ NIC about 3 year old I got this from Techdata.

[travis-dennis_2]

Is it a verified Cisco NIC or one from another company? There was also another issue that I remember that required an RMA. Check with Cisco TAC. I'll bet a doughnut they replace it. There were a few funky things that hapened right about the time frame you are talking about. If memory serves, (and it probably does not) I think it has something to do with a WatchDog timeout.

Hope this helps.

Please remember to rate all replies

[concurrent]

I have this case open with Cisco about 2 month. We tried almost everything beside replace the NIC and PIX. Now, we are planning to replace the NIC cards. Thanks for your help to point this out.

[concurrent]

After replace NIC cards on the pix it still crashing during high traffic pass over interface.

[ee99ee2]

Have you tried 7.1.2?

[amohabir1]

Do you have any sort of logging turned on? UDP and or TCP? If you are logging over TCP you might want to turn it off.