Connections get kicked off to hosts behind PIX firewall

[jkmathew77]

I have a conduit open to a SSH port to a host inside the PIX network. For some reason now if i have a connection to a host behind the PIX firewall using SSH or telnet i get kicked off after a minute or two. I am able to reconnect with no problem but it does not seem to hold the connection. What am i missing"?

 

[jkmathew77]

Actually i found out the cause of it, but does anyone know why it is happening?

I have a PIX 515 firewall running Version 6.2(1). I have been working on some issues and found out what the core problem was. It seems randomly the PIX restart itself. I have been monitoring using a serial connection and it reloads its self without any warning at random intervals. Is this something that you can help me with or even point me in the direction on why this is happening?

 

[gbiello]

Hardware problem? Try setting up a syslog server for more diagnostics.
-gbiello

 

[jkmathew77]

Thank you...... I am suspecting that it is a hardware problem as well. But I have never set up a syslog server. Where can I find out how to do that?

 

[gbiello]

I use a freeware NT syslog daemon called "Kiwi". I think I got it on downloads.com. Download it and install in where you like.

Next, add these lines to the PIX config.

logging on
logging trap warnings
logging host inside <ip address of server>

You can change the logging level by changing
&quot;logging trap warnings&quot; to &quot;logging trap info&quot; or something else.

Hope this helps,
-gbiello

 

[yizhar]

HI.

As mentioned, this is probably a hardware issue.
Read here to look for any match:

http://www.cisco.com/warp/public/tech_tips/index/hardware/security/500/fn.html

Try also to use a UPS to eliminate problems from the electricity company.
A bad NIC might also be the problem.

You can download kiwi syslog from here:

http://www.kiwi-enterprises.com

Is this an old pix device that was upgraded, or a brand new one?
How many interfaces?
What NIC model?
Is this a failover setup?

Try also to use the PDM utilization graphs to troubleshoot the problem.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar