WARNING:  Not sure this is related 100%, but we had our firewall drop all ARP entries for any NAT'ed objects over time when we updated to 9.1.7.  Was difficult to diagnose as we were in a HA pair during the upgrade and the ARP table did not time out ...