After software restart (warm boot), ASG no longer proxying traffic.
This may happen as well after applying a renewed license and doing software only restart.
ASG UI, Content Analysis tab may not show any license installed. Health check to internal Content Analysis shows failure. Packet capture shows ASG not responding during TCP handshake.
ASG
Release : 6.7.5.12 (may happen on other ASG versions as well)
Common Operating Environment (COE) failed to rehook Content Analysis causing the SG not to accept traffic
Power cycle ASG unit (i.e. power off, wait for couple of seconds, power on).
Workaround: Should you need to temporary make SG to proxy traffic without ICAP scanning until cold boot/power cycle can be done on ASG unit, you can bypass ICAP scanning and set internal ICAP health check to disabled healthy.