ASA 5516x VPN stop working every couple (4) hours

[Alex Li]

We have two ASA 5516x set as Active-Standby, and they are using for site-to-site VPN and Remote User SSL VPN only. They have been set up and running fine for months.

Today, I noticed that the VPN Services stop working every couple hours. When this happens:

1. The SSL Web Portal for VPN won't load.

2. User can't connect using Anyconnect Client.

3. Site-to-site VPN connections get dropped.

4. Weird thing is, not all existing user VPN sessions get dropped, there are some connections remain connected.

5. It takes about 15-20 minutes for everything goes back to normal, it looks like some service(s) get reboot.

6. It will stay fine for couple hours, then happens again. 

I did a hot reboot for both units, but not help. 

Our code is 9.8.2, pretty new. 

Any thoughts on this? 

Thank you in advance

[Alex Li]

I got a case open with Cisco for this. I will update the issue/fix here. Stay tuned.  

[#Mat]

Hi Alex Li. It is strange. Is this a new deployment? Have you tried updating?

Regards.-

[Alex Li]

Hi Mat, 

It's been deployed for couple months, and it's have been running fine until last week. 

The code is 9.8.2-24, I am planning to upgrade it to 9.8.2-35 to see if that fixes the issue. But I will wait to see what Cisco support finds out. 

Thanks