How do I find out why our firewall was reset in the middle of the day?

Posted on 2009-12-23
Last Modified: 2012-05-08
Sorry guys, here's comes another newbie question.

Our firewall somehow was reset in the middle of the day and I want to know why. How do I do that? Does "sh log" tell me exactly why?

Also, when I do "sh inter detail":
Interface Ethernet0/0 "inside", is up, line protocol is up
  Hardware is i82546GB rev03, BW 1000 Mbps
        Auto-Duplex(Full-duplex), Auto-Speed(100 Mbps)
Does "Auto-Duplex(Full-duplex)" mean that this interface is on auto negotiate as oppose to manually setting it to full duplex?

Thank you for all the help guys!!
Question by:golowai
    LVL 33

    Expert Comment

    By reset, do you mean power cycled, a VPN reset..?  

    If you are streaming log files with the right leve to a syslog server, a quick search of the logs during that time should tell you if any command was issued to the firewall that would have interfered with traffic.   If the power died, do a SHOW VER on the unit and it will give you the uptime since last reset.


    Author Comment

    That is what concerns me...when I do "sh ver" it tells me that it is only up for a little more than an hour..."ASA5510FW01 up 1 hour 27 mins". If you don't mind can you tell me how i would set up a streaming log? Also, does that put a strain on our network?
    LVL 33

    Accepted Solution

    Setting up a syslog is very simple:

    You will need a syslog server on the network, there are plenty of free ones available.  I use KIWI, its free also....

    The log has different logging levels.   The higher levels give more details, but create mor logging traffic.     Level 5 is usually sufficient.  Level 7 "debug" does start to stream a LOT of traffic.  Use this only when needed for troubleshooting.  

    Author Comment

    Hi MikeKane, Thank you for all the info! Would you mind shining some light on my other question regarding duplexing?
    LVL 33

    Expert Comment

    Ah, yes the Auto (Full) would indicate that the is set to auto negotiate.

    Featured Post

    Highfive + Dolby Voice = No More Audio Complaints!

    Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

    Join & Write a Comment

    Overview The Cisco PIX 501, PIX 506e, ASA 5505 and ASA 5510 (most if not all of this information will be relevant to the PIX 515e but I do not have a working configuration handy to verify the validity) are primarily used within small to medium busi…
    I recently updated from an old PIX platform to the new ASA platform.  While upgrading, I was tremendously confused about how the VPN and AnyConnect licensing works.  It turns out that the ASA has 3 different VPN licensing schemes. "site-to-site" …
    Need more eyes on your posted question? Go ahead and follow the quick steps in this video to learn how to Request Attention to your question. *Log into your Experts Exchange account *Find the question you want to Request Attention for *Go to the e…
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    733 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now