what type of logging should i turn on to find out why my PIX 515 version 6.3.4 keeps failing over?
Here are the loggs i have so far:
104002: (Primary) Switching to STNDBY - switch to failed state
104003: (Primary) Switching to FAILED.
105009: (Primary) Testing on interface 1 Failed
105003: (Primary) Monitoring on interface 0 waiting
104004: (Primary) Switching to OK.
105003: (Primary) Monitoring on interface 1 waiting
105004: (Primary) Monitoring on interface 1 normal
105004: (Primary) Monitoring on interface 0 normal
105005: (Primary) Lost Failover communications with mate on interface 0
105008: (Primary) Testing Interface 0
103003: (Primary) Other firewall network interface 0 failed.
104001: (Primary) Switching to ACTIVE - mate interface failed.
105009: (Primary) Testing on interface 0 Passed
305006: portmap translation creation failed for protocol 50 src inside:7.x.x.x dst outside:67.x.x.x
305005: No translation group found for icmp src outside:64.x.x.x dst inside:204.x.x.x (type 8, code 0)
305005: No translation group found for icmp src outside:64.x.x.x dst inside:204.x.x.x (type 8, code 0)
305005: No translation group found for icmp src outside:64.x.x.x dst inside:204.x.x.x (type 8, code 0)
305006: portmap translation creation failed for protocol 50 src inside:7.4.92.100 dst outside:67.70.238.26
105003: (Primary) Monitoring on interface 1 waiting
105003: (Primary) Monitoring on interface 0 waiting
305006: portmap translation creation failed for protocol 50 src inside:7.x.x.x dst outside:67.x.x.x
105004: (Primary) Monitoring on interface 1 normal
105004: (Primary) Monitoring on interface 0 normal
I also have a SYSlog going and am seeing messages like:
Deny IP Spoof from (0.0.0.0) to 204.x.x.x on interface outside
and
Deny IP due to Land Attack from 204.5.5.1 to 204.5.5.1
Any help would be great.
