I've noticed this behavior on several PIX506's running 6.3.5. I have them configured to allow SSH access from outside. They all work fine until a reload. After the reload, to get the SSH working again, I need to re-issue "ca generate rsa key 1024". SSH starts working again after that. How can I make it stick?