Hi,
We have a large amount of firewalls being managed by Cisco CSPM version
3.1. This client has many departments and each department has a firwall at it's exit point. These departments are connected in a star configuration to their head-office, which also has a firewall. Some of the department have direct connection between them using site-to-site VPN tunnels.
Sometimes when we make some changes on CSPM and approve any firewall & these firewall terminates a site-to-site VPN tunnel. Then the tunnel comes down. If we do another approve form CSPM to the firewall (without making any policy changes in CSPM), then the tunnel comes back on. We have noticed that CSPM is changing the commands between these approves. This problem happens on random firewalls and at random time intervals (i.e., during random approves).
Has anybody seen such a problem before?
Any help is appriciated.
Thanks