ASA CSC-SSM-10 module constantly unresponsive

Unanswered Question
Sep 28th, 2009

Hello All,

We have an ASA5510 running 8.0(4) with a CSC-SSM-10 module with the following characteristics:

Hardware version: 1.0

Firmware version: 1.0(11)2

Software version: CSC SSM 6.2.1599.4

Once in a while the CSC-SSM module appears as unresponsive and a reset is needed for it to work again. We haven't been able to find a pattern or a reason for this to happen and our customer is unhappy with having to monitor the module everyday in case it's unresponsive again.

This happens almost every month, and we are running out of ideas on how to troubleshoot this.

Is this expected? is there a command or something we should monitor to find the real problem?

Thanks and regards,

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Valeriu Filipescu Wed, 09/30/2009 - 23:40

Hi,

I have a similar situation with one of my clients.

I resolve situation by tunning access-list which send traffic to CSC (for example is a best practce to take off comunication from CSC address to www ports - each scan of a connection to the internet generate an interogation to Trend site from CSC address which not need protection-, also if you have http trafic from Inside to your DMZ also I think that is a traffic which don't need protection). Initially I have to much traffic send to CSC and I try to select just traffic which really need protection.

Daniela Herrera Thu, 10/01/2009 - 10:32

Thanks a lot for the answer.

We already are limiting the traffic that is being sent to the CSC ssm, we are only missing the connection between the CSC and the internet, however I've been monitoring and it seems the number of connections from there is not relevant. We'll add it however (thanks again) and will try also adding the "set connection per-client-max" on the policy-map to see it if helps.

We are now running 6.2.1599.6 and will monitor for a while.

Any other ideas on how to troubleshoot this will be greatly appreciated.

Thanks again and regards,

snooter Tue, 04/06/2010 - 06:31

Daniela, I'm curious if you ever found a resolution to this?  We're seeing the same thing here.  I can't find any reason why the card would become unresponsive, but it does.  Our only fix is forcing a reboot of the asa which drops all of our remote vpn's and brings down the access to our website = not a lot of happy people!

Any fix yet?

Daniela Herrera Tue, 04/06/2010 - 13:52

Hello,

We couldn't find an indicator of what was the problem. We are currently on the release 6.3.1172.0 and have been stable for around 4 months now I think.

We also moved the module interface so that it is now connected directly to the internet and have noticed a better performance since then.

We are not really sure what fixed the issue, but I would suggest an upgrade and monitoring the number of conections to make sure those are not a problem for the module.

Hope it helps.

Regards,

Actions

This Discussion