ASA 5520 issues with encrypted traffic

[Vikdemion]

I have a few ipsec-vpns on cisco asa 5520 (2 in failover claster). In theese tunnels some rules no longer work. ASA stop encrypt outgoing trafic on some rules inside_network-outside_network.

Version of system - asa831-k8. And I can't upgrade it, couse Legislation in Russia

How can I fix this problem?

[Karsten Iwen]

8.3(1) was the probably worst ASA-version ever with the most bugs on this platform. So I assume that the only solution is to upgrade.
As a workaround, regular reboots could help also. These are nearly non-disruptive in a failover cluster. For that reboot the standby unit, after that do a failover to the standby unit and reboot the former active unit. If that doesn't help (I had these situations log time ago) reboot both units at the same time.


Sent from Cisco Technical Support iPad App