Symptoms
If SSL session mirroring is enabled, but the HA channel is down, attempts to mirror may result in memory leakage.
Impact
Memory leakage over time resulting in eventual memory pressure leading to performance degradation and possible TMOS restart.
Conditions
- SSL session mirroring enabled
- HA channel is down
Workaround
Ensuring that the HA peer is present and connected will avoid the leakage.
Otherwise, no reasonable workaround exists short of disabling SSL session mirroring.
Fix Information
SSL session mirroring no longer leaks memory when the HA channel is down.
