cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

901
Views
0
Helpful
3
Replies
mahbobsun
Beginner

TCP connections on Cisco ASA disconnects the database session every 30 Minutes

 

Right after a firmware upgrade form 8.4.2 to 8.4.7   on our ASA 5540:

the database app that makes a tcp connection with the database  loses connection to the database servers on the inside of the firewall

-Nothing changed on the process servers.

-Nothing but firmware version changed on the firewalls.

-Rebooting did not help.

-Connections don't always drop every 30 minutes, but it's still almost exactly at that time, with a 90% chance of it happening. And it reestablishes in about 52 second

-The client is not willingly terminating the connections to the database servers on the inside. The connection is just going away.

 

3 REPLIES 3
pankaj29in
Beginner

Hello Mah,

 

What exactly errors are you getting in logs ? please share your configuration to see further.

 

Regards

Pankaj

I am not seeing any error in the logs in ASA but in our client we see:

Latest from PROD (times are in UTC):

Sun Apr 13 10:22:10 2014 - ERR: Read from the server failed (err[36],sev[78],state[0],line[0],server[],proc[],sql[exec sp_events_insupd :p1,:p2,:p3,:p4,:p5,:p6,:p7,:p8,:p9,:p10,:p11,:p12,:p13,:p14,:p15,:p16,:p17],err_type[client])

Sun Apr 13 11:47:09 2014 - ERR: Read from the server failed (err[36],sev[78],state[0],line[0],server[],proc[],sql[exec sp_events_insupd :p1,:p2,:p3,:p4,:p5,:p6,:p7,:p8,:p9,:p10,:p11,:p12,:p13,:p14,:p15,:p16,:p17],err_type[client])

 

Are you using SQL inspection?
Other user had same issue with Oracle DB and ASA 8.4(7) combination.
The workaround is to disable SQL inspection. Could you try this?

If the issue is still seen, pls contact Cisco TAC.

Create
Recognize Your Peers
Content for Community-Ad