PIX515 slowly stops allowing connections

[ewhinger]

I have a PIX515 (5.3.2 code) that slowly stops allowing outbound connections. We do a "sho xlate" and see an increasing # of connections are using PAT. If we do a "clear xlate", all outbound connections start working until the PAT connections start again.

[ajd]

Can you print out the config (excluding the ips of course)?

How many external ip's do you have? Its not recommended to PAT to the outside interface. Also, do you any outbound policies?

The reason I ask is because the PIX, though they hide it, can only PAT around 4000 simu connects.

-ne1secure?