Cisco WSA Stale Connections

[eduserverteam]

Hi,

I hope someone can help, currently we have a number of Cisco WSA's behind a load balancer, some are S370's and some S300V's, the issue I am currently facing is that the WSA's are holding on to connections, the timeout on the WSA's and loadbalancer is set to 5 mins (300seconds), the issue manifests itself with connections building on a WSA until it reaches the 40,000 ish limit of a WSA of which it then stops accepting connections due to the stale connections, does anyone know what may be causing this or how I may track it down?

Many Thanks in advance

[Alexandra Giunta]

What version of AsyncOS are you running?  There are some versions with a defect that causes the WSA to incorrectly hold onto these connections.

[eduserverteam]

The current version of AsyncOS we are using on the WSA's is 8.5.2-027 and the SMA is on 9.5.0-125.

Thanks