Friday, October 16, 2020

ASA 5516-X Dropped Outbound Traffic

Morning, as the title indicates, I have an ASA 5516-X, in an HA pair (active/standby), that is dropping outbound traffic. I have to manually failover to the secondary and outbound traffic is restored. AnyConnect sessions are able to remain authenticated, OSPF adjacencies are still formed, IPSec/VTI tunnels remain up and I have a full routing table. CPU is at about 25%. SFR module is up/up so its allowing traffic through. Syslogs do not show any entries pointing to an issue. Code I am running is 9.12.4 and the SFR module is on 6.4.0.92. TAC case is open and they have not been able to find anything from sh tech or syslogs either. This is the third time this has happened since March. Google and Reddit searches havent produced much. Has anyone come across this before or any recommendations as far as looking at a particular part of the config? Id be more than happy to provide scrubbed information if more info is needed. TIA.



No comments:

Post a Comment