Terminal services agent issue with traffic dropping

[infradata]

Hi,

We currently let our TSA connect to our management interface. This is however causing problems in that in about 30 mins all traffic is dropped on the management interface. The GUI and CLI and such are time-outed then. To resolve this we need to remove the TSA on the PA and the interface works fine again.

Support recommends to provision an dedicated physical interface for these clients (around 150). Is this a known issue with the management interface and TSA's ?

[hshah]

Hi Infradata,

Normally TSA works on management interface without issue.

However, based on information provided in this thread, it seems TSA spikes out Memory/CPU on Management interface. Which results in loss of management access and traffic. Let me know if that is the issue.

If that is correct than there are two possibility,

1. Too much Traffic exchange between Firewall and TSA

2. Potential bug

Did TAC engineer provided any root cause.

Regards,

Hardik Shah

[infradata]

We currently only have one agent connected when this isse occurs so i rule out too much traffic.

No rool cause as of yet. We are now setting up the new physcal interface to test this setup and see if this resolves the issue.

[Jacobwebb]

Infradata,

Are you currently running an antivirus or firewall on the computer hosting your TSA?  If so what is the software?

Regards,

Jacob Webb

[hshah]

Hi Infradata,

I would not encourage to go for this work around before finding root cause.

Connect a console to firewall, and then check whats happening with firewall at the time of issue.

1. check if management interface has ARP for default gateway

2. Check if it can ping the default gateway

3. Do tcpdump to find out whats happening with packets.

How To Packet Capture (tcpdump) On Management Interface

4. check management resource

show system resources

5. check ms.log for obvious error "tail follow yes mp-log ms.log

Let me know if this helps.

Regards,

Hardik Shah

[infradata]

So we let all the agents connect to the new physical interface and we have no problems anymore. We now have added around 90 agents and it's all working now.

[hshah]

Thants great Infradata.... Which firewall platform is this ?