Ive got a strange problem with one of my Cisco asa units. Its a 5508-x (IOS 9.4) on a 100Mbit ethernet connection. It has 3 site to site VPN tunnels to other buildings carrying VOIP traffic. Everything seems to work fine but when our users hit one of our POS servers which is colocated the traffic to that server starts to fail. They can hit other servers fine and users at other branches can hit the "affected" server fine as well. This leads me back to the ASA though I'm not sure where to go from here.
sh conn count gives me around 1000 active and 1600 max
sh xlate count gives me about 700 active and 1200 max
I'm not running scanning threat protection right now. CPU usage is low. Most of the time 2-12%. Uses about 900MB of RAM out of 3GB. I have 130 devices on the network behind the ASA with 90 of those devices being computers that need to access this POS server. If i had to guess I would say the ASA cannot handle that many connection to one host. I am not seeing this problem on my other branches that are using a larger ASA 5525 with much bigger network loads. Any insight would be greatly appreciated.
Thanks,
Jeremy
sh conn count gives me around 1000 active and 1600 max
sh xlate count gives me about 700 active and 1200 max
I'm not running scanning threat protection right now. CPU usage is low. Most of the time 2-12%. Uses about 900MB of RAM out of 3GB. I have 130 devices on the network behind the ASA with 90 of those devices being computers that need to access this POS server. If i had to guess I would say the ASA cannot handle that many connection to one host. I am not seeing this problem on my other branches that are using a larger ASA 5525 with much bigger network loads. Any insight would be greatly appreciated.
Thanks,
Jeremy
