Upgrade PIX

[m.cremers]

I have upgraded a pix from 6.3.1 to 6.3.3 and now the PIX keeps on rebooting. Downgrading doesn't have any good result! I can find any answer on the site. This is the error message:

An internal error occurred. Specifically, a programming assertion was

violated. Copy the error message exactly as it appears, and get the

output of the show version command and the contents of the configuration

file. Then call your technical support representative.

assertion "result" failed: file "crypto_nist_tests.c", line 406

Thread Name: initpix/intf5 (Old pc 0x001161c1 ebp 0x01000b78)

Does any one know the answer?

Thanks in advance!

Mark Cremers

[scoclayton]

Hi,

You are seeing the results of a PIX crashing. My suggestion would be to go ahead and capture all of the info sent to the console by the PIX during a reload cycle and open a TAC case. They can decode the traceback and start digging in to find out where the issue actually is. One thing you may be able to also do is disconnect all of the cables on the PIX and reload it. See if the PIX crashes in this setup as well. If it does not, we have a pretty good idea that the crash is being caused by something traffic related. Sorry for the vague answer, but this is something that is better handled via a TAC case than on this forum. Good luck!

Scott

[pokwan]

Scott,

I am going to upgrade our PIX515 from version 5.2(5) to version 6.3(3) this weekend. Is this version reliable? It does not look promising after reading this post...

Thanks.

PF

[scoclayton]

Please do not let this concern you. We have bugs in every version of code that can cause a traceback to occur (even 5.2(5)). Most crashes or bugs are related to a specific traffic pattern triggering an event in the PIX or hardware issues. We have *many* people running 6.3(3) code without a problem. If you need any of the new features in the 6.3(3) code, then by all means, an upgrade should be fine. For backup purposes, make sure you have a good copy of 5.2(5) on your TFTP sevrer as well in case you need to roll back. Good luck!

Scott

[pokwan]

Thanks Scott. Will go ahead with the upgrade.

PF