Symptom

ASA/FTD may go into a Split Brain scenario is case the command "show conn" (or any of its variances) is run when the failover link communication is down.

Conditions

> ASA units in Failover mode on releases affected > Communication between failover units over link down > Failover polling interval and Holdtime are configured very short value, such as: failover polltime unit msec 200 holdtime 1 > Execution of "show conn" command under above circumstances

Workaround

Increase the failover polling interval and Holdtime values on the failover config section.

Further Problem Description