I have a css in one armed config. My PIX interface is getting ICMP from the CSS interface, not a service address, but the CSS interface.
The PIX is denying the requests, but I do not see where it is coming from.
They are coming more frequent that the TACACS frequency setting.
I did have some services configured with ICMP keepalives, but they are suspended.
Anyone have any ideas?