PIX 515-R - Connection Drops

[TheJax2009]

I'm hoping someone can assist...

I've been having a major problem with our Internet service.  Our ISP insists it's the firewall.

I'm not a Pix expert by any means, but here's what's happening:

- Our Internet service drops.

- When this happens I try to ping the PIX on the inside interface and it times out.

- Our Internet service comes back up and I am able to ping the Pix.

- I connect to the Pix and issue a SHOW INTERFACE command to look for errors.  I FIND NONE.

Beyond that..I don't know what to do!  Any suggestions would be greatly appreciated.

Nick

[Jennifer Halim]

What version is your PIX firewall? and also did the PIX crash? is there any output when you do "show crash".

Did the PIX reload? you can check out when it lasts reload by issueing "show version"

[TheJax2009]

Hello,

The SHOW CRASH command gives me:

sho crash
: Saved_Crash

Thread Name: PIX Garbage Collector (Old pc 0x002e0c1c ebp 0x00d1c6a8)

Traceback:
0: 002d893b
1: 002d8043
2: 002e0967
3: 002e0bd8
4: 001036dd
5: 00000000
    vector 0x0000000e (page fault)
       edi 0x00000000
       esi 0x00d22128
       ebp 0x00d1c628
       esp 0x00d1c5fc
       ebx 0x00a80cd0
       edx 0x00000000
       ecx 0x00a80cdc
       eax 0x00000000
error code 0x00000000
       eip 0x002fa6d2
        cs 0x00000008
    eflags 0x123456cd
       CR2 0x00000034
Stack dump: base:0x00d1b724 size:4096, active:424
0x00d1c720: 0x00000000
0x00d1c71c: 0x002e09c8
0x00d1c718-0x00d1c714: 0x00000000
0x00d1c710-0x00d1c6f4: 0x12345678
0x00d1c6f0: 0x00000000
0x00d1c6ec: 0x001036dd
0x00d1c6e8: 0x00d1c714
0x00d1c6e4: 0x0000000a
0x00d1c6e0-0x00d1c6cc: 0x12345678
0x00d1c6c8-0x00d1c6c0: 0x00000000
0x00d1c6bc: 0x002e09df
0x00d1c6b8: 0x027e440e
0x00d1c6b4: 0x00a80cd0
0x00d1c6b0: 0x00000000
0x00d1c6ac: 0x002e0bd8
0x00d1c6a8: 0x00d1c6e8
0x00d1c6a4-0x00d1c6a0: 0x12345678
0x00d1c69c: 0x0054e008
0x00d1c698: 0x00000000
0x00d1c694: 0x027e440e
0x00d1c690: 0x00a80cd0
0x00d1c68c: 0x002e0967
0x00d1c688: 0x00d1c6a8
0x00d1c684: 0x00000246
0x00d1c680: 0x00f016cc
0x00d1c67c: 0x004bb2e6
0x00d1c678: 0x00000000
0x00d1c674: 0x00f016cc
0x00d1c670: 0x00f1136c
0x00d1c66c: 0x00000246
0x00d1c668: 0x00000000
0x00d1c664: 0x00a80cd0
0x00d1c660: 0x00d22128
0x00d1c65c: 0x002d8043
0x00d1c658: 0x00d1c688
0x00d1c654: 0x00000000
0x00d1c650: 0x027dc7b8
0x00d1c64c: 0x00000000
0x00d1c648: 0x027e440e
0x00d1c644: 0x00f016cc
0x00d1c640: 0x00a80cd0
0x00d1c63c-0x00d1c638: 0x12345678
0x00d1c634: 0x00000001
0x00d1c630: 0x00a80cd0
0x00d1c62c: 0x002d893b
0x00d1c628: 0x00d1c658
0x00d1c624: 0x00c19400
0x00d1c620: 0x00a7fd58
0x00d1c61c: 0x002d8944
0x00d1c618: 0x00d1c658
0x00d1c614: 0x00d21310
0x00d1c610: 0x00a80cd0
0x00d1c60c: 0x00005948
0x00d1c608: 0x00010207
0x00d1c604: 0x00000008
0x00d1c600: 0x002fa6d2
0x00d1c5fc-0x00d1c5f8: 0x00000000 *
0x00d1c5f4: 0x00a80cdc
0x00d1c5f0: 0x00000000
0x00d1c5ec: 0x00a80cd0
0x00d1c5e8: 0x00d1c5fc
0x00d1c5e4: 0x00d1c628
0x00d1c5e0: 0x00d22128
0x00d1c5dc: 0x00000000
0x00d1c5d8: 0x0000000e
0x00d1c5d4: 0x00104ff9
0x00d1c5d0: 0x00d1c628
0x00d1c5cc: 0x002fa343
0x00d1c5c8: 0x00004859
0x00d1c5c4: 0x00000006
0x00d1c5c0: 0x0117011c
0x00d1c5bc: 0x002f8623
0x00d1c5b8: 0x00d1c5f8
0x00d1c5b4: 0x00000242
0x00d1c5b0: 0x0117011c
0x00d1c5ac: 0x002f8632
0x00d1c5a8: 0x00d1c5f8
0x00d1c5a4: 0x00000019
0x00d1c5a0: 0x00000242
0x00d1c59c: 0x003daae6
0x00d1c598: 0x00000003
0x00d1c594: 0x00d220d0
0x00d1c590: 0x00000000
0x00d1c58c: 0x00d22128
0x00d1c588: 0x00a80cd0
0x00d1c584: 0x00d1c5b4
0x00d1c580: 0x00000000
0x00d1c57c: 0x85b00000

Cisco PIX Firewall Version 6.3(1)
The flash device is in use by another task.

It appears the Pix crashed about 4 hours ago.

I saw an article relating to this error.  It suggested disabling the h323 protocol: no fixup protocol h323 h225 1720

Thanks for your assistance!     

[Jennifer Halim · Accepted solution]

It matches bugID: CSCec19113

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCec19113

Please upgrade the PIX to the latest version of 6.3.x, or disable fixup h323 as you already did

[TheJax2009]

Thank you!!