PIX 501 6.3(5) External DNS issue

[GarrethSpeer]

Periodically external dns requests fail. I have to clear xlate in order to successfully resolve external adresses again. I changed maximum dns packet limit but this did not work. Also disable EDNS0 on Windows 2003 servers.

[jackko]

since the pix you've got is 501 and you mentioned "clear xlate" would resolve the issue, i guess the issue is related to the number of internal users.

do "sh ver" to verify. assuming the current license only allow 10 internal host, then i believe you need to purchase a license upgrade from 10 - 50, or from 10 - unlimited.

[GarrethSpeer]

I only have 4 internal hosts

[GarrethSpeer]

I only have 4 internal hosts

[arunsing]

Hi,

Can you paste the output of sh local-host at the time when the pix is not passing the traffic

Arun