our internet went down a few weeks ago when our primary PA failover to a secondary PA. We found out, after doing some research and investigative work, that this was due to the amount of new session created, which cause the PA to use the slowpath and access more cpu resource. Once we failedover, we had internet access for about 5-10 minutes and then suddently we lost internet access. After talking to tech support, we came to a conclusion that this might have been to due arp. We have about 25 static NATs, and 3 DNATs, could this have been the cause? if so why did we have internet for a while and suddently lost connection? our failover condition is based on link monitoring, trust, untrust, and path monitoring, which is our gateway. Why didnt we fail back to the active if we lost access to the internet- our path was never down on our secondary FW. We're running 8.0.2
... View more