Firewalls started rapidly change

[RacoonMateo]

Hello all, 

our setup has detected rapid failover exchange. 

For sure, we can say that there was not ISPs outage on any lines. 
They just rapidly did this, back and forth. 

My bet here is that probably one of the SFP modules could be faulty on MX250.

Log is here :

The primary security appliance, "Primary FW", became backup at 11:35 PM PDT on Aug 14.
The primary security appliance, "Primary FW", became master at 11:35 PM PDT on Aug 14.
The primary security appliance, "Primary FW", became backup at 11:35 PM PDT on Aug 14.
The primary security appliance, "Primary FW", became master at 11:35 PM PDT on Aug 14.
The primary security appliance, "Primary FW", became backup at 11:35 PM PDT on Aug 14.
The primary security appliance, "Primary FW", became master at 11:36 PM PDT on Aug 14.
The spare security appliance, "Secondary FW", became master at 11:36 PM PDT on Aug 14.
The spare security appliance, "Secondary FW", became backup at 11:36 PM PDT on Aug 14.
The spare security appliance, "Secondary FW", became master at 11:36 PM PDT on Aug 14.
The spare security appliance, "Secondary FW", became backup at 11:36 PM PDT on Aug 14.
The spare security appliance, "Secondary FW", became master at 11:36 PM PDT on Aug 14.
The spare security appliance, "Secondary FW", became backup at 11:36 PM PDT on Aug 14.

Thanks for any help !

[PhilipDAth]

Was their any firmware upgrades?

[RacoonMateo]

No no, nothing like that.

It just started jumping as you can see. 
It is ok for now, but I m not sure what could cause that to prevent this. 

[RacoonMateo]

.

[Malwina]

Hi! As you said, it could indeed be an issue with an SFP module. Was this a one-time occurrence? 

[JF1]

we experienced a similar issue whilst we were performing a penetration security tests. The CPU on the primary appliance was becoming overloaded (as a result of the pen test), flipping to the secondary. Once the primary recovered it flipped back and the process repeated. May be worth raising a case with Meraki and enquire whether the compute in the appliances were being overutilized at the time.