topic Hi balamuruganmanavalan in Network Security

"Interface 'DataPlaneInterface0' is not receiving any packets" error message on SFR, under Health Monitor

balamuruganmanavalan — Tue, 12 Mar 2019 12:40:52 GMT

Hi Folks,

Today evening, i found an error that "Interface 'DataPlaneInterface0' is not receiving any packets" error message on SFR, under Health Monitor.

Is this related to interface issues or software corruption on SFR. Since data plane is a virtual interface i understood, correct me if am wrong.

Cisco 5525x appliance.. Fire POWER Services Software Module version 5.3.1-152 and Data Plane status is UP.

ASA version 9.2.2.4

Hi Folks, From my team i got

balamuruganmanavalan — Mon, 11 May 2015 14:18:18 GMT

Hi Folks,

From my team i got this error and found no traffic redirection configured in ASA to SFR for inspection. Thats why the events are generated in Fire SIGHT management center.

After i configured and applied the service policy globally. Issue resolved.

I'm also getting this message

twilcox — Tue, 01 Sep 2015 18:09:45 GMT

I'm also getting this message but it's only on our secondary unit in an active / passive failover scenario. I've configured the policy and redirect on the primary and it appears this is copied to the secondary system but I'm getting this message on the Source Fire Management console; is this normal? Ideally I'd like know if the passive 5525 is supposed to get packets sent to it's fire power module but if it isn't then I'd like to know how to eliminate this since it's flagging a "critical" error on the MC.

I had same problem and what

alberx — Wed, 02 Sep 2015 08:56:31 GMT

I had same problem and what finally I did for not having always the red in Health check was to disable the interface status monitoring.

"Health policy --> Interface status --> off".

Another soltion is to create two different health policies one for the active with the interface monitoring on, and another for the passive with the interface status off.

Thanks so much! After I

twilcox — Wed, 02 Sep 2015 14:14:42 GMT

Thanks so much! After I posted this I went back through the Health Policy and did exactly this after finding the interface monitoring status box. What I ended up doing was changing the policy and then applying it only to the secondary system; it too bad that you simply can't copy then mod the existing policy at least I didn't find a way to do that. I really appreciate you getting back to me on this one. It's our first week using this product so everything is new.

Check your ASA that you are

andrehenry — Wed, 27 Jan 2016 00:27:04 GMT

Check your ASA that you are utilizing the correct module for the IPS. At the ASA config itself... Note disabling the health alerts does stop the alerts but may not resolve the underlying issue.

policy-map global_policy

class IPS
sfr fail-open

vs.

policy-map global_policy

class IPS
ips promiscuous fail-open

The latter instructing the ASA to use the ips module vs the former instructing the ASA to use the sfr module.

To change, you will first need to delete the class IPS configuration

#conf t

# policy-map global_policy

# no class IPS

then while still within the policy-map section add the corrected class

#conf t

# policy-map global_policy

#class IPS

#sfr fail-open

you can also fail-close depending on your environment.

Hello everyone

huucuonghumg — Wed, 27 Apr 2016 06:43:18 GMT

Hello everyone

I have same problem with firewall 5525X: version sfr module 5.3.1 and firesight management version 5.4.0. my problem cannot show any data from firesight mannagemnet and an critical. please help me. thanks!

Hi huucuonghumg,

balamuruganmanavalan — Wed, 27 Apr 2016 07:08:05 GMT

Hi huucuonghumg,

Have you configured Service policy in Cisco ASA?

Thanks.

Hi balamuruganmanavalan

huucuonghumg — Wed, 27 Apr 2016 08:03:39 GMT

Hi balamuruganmanavalan

I have config service policy done but not such is true. what information do you want more. i will show it. 🙂

What I meant to say, have you

balamuruganmanavalan — Wed, 27 Apr 2016 18:34:20 GMT

What I meant to say, have you done the configuration as per andrehenry's comment?

You can't seem to copy but

Jared Eberle — Wed, 27 Apr 2016 21:56:46 GMT

You can't seem to copy but you can export the current policy and then reimport it as a new policy and change the name. A little more work but the same result.

Hi balamuruganmanavalan

huucuonghumg — Thu, 28 Apr 2016 01:56:16 GMT

Hi balamuruganmanavalan

Yes, i created policy-map and class-map, but still not show traffic.

Hi,

balamuruganmanavalan — Thu, 28 Apr 2016 11:15:27 GMT

Hi,

Upgrade sfr to 5.4.1.2.11

Compatible versions:

Sfr : 5.4.1.2.11

Firesight: 5.4.0

ASA : 9.3.2.2

Update me once you are done...

Hi balamuruganmanavalan

huucuonghumg — Fri, 29 Apr 2016 09:10:15 GMT

Hi balamuruganmanavalan

can you tell me the link down load sfr version 5.4.1.2.11. i am not found in the link

https://software.cisco.com/download/release.html?mdfid=286271172&flowid=77244&softwareid=286277393&release=6.0.1&relind=AVAILABLE&rellifecycle=&reltype=latest

thanks you!

What is your Cisco ASA model?

balamuruganmanavalan — Fri, 29 Apr 2016 10:56:42 GMT

What is your Cisco ASA model?

Hi balamuruganmanavalan

huucuonghumg — Tue, 03 May 2016 03:12:09 GMT

Hi balamuruganmanavalan

my Cisco ASA model 5525X 🙂

Re: "Interface 'DataPlaneInterface0' is not receiving any packets" error message on SFR, under Health Monitor

Chris Johnson — Tue, 07 Nov 2017 16:51:51 GMT

Saw this on my end this past week. I had to rebuild a sensor due to 2 bad SSD drives on my 5545-X. What I found was the initial health policy was applied even though the device info told me the custom policy I created when I set the FMC up was applied. I went to look at all health policies and that is where I saw the initial policy still applied. It looks like this cleared up my issue. I am on 6.2.0.3-108 sensor/fmc version.

Re: "Interface DataPlaneInterface0 is not receiving any packets" error message on SFR, under Health Monitor

karl_watson — Tue, 09 Jan 2018 14:30:58 GMT

I have this issue too,

But do not have IP class configured on my global_policy policy map.

I am not sure why I am getting this message.

It's happening on all for firewalls being monitored.

Many thanks,

Karl

Re: Hello everyone

star1 — Wed, 22 Jan 2020 15:39:56 GMT

i recently deployed two FTDs Active and Standby but now i am receiving this error Interface 'GigabitEthernet0/3' is not receiving any packets.

can someone kindly to advice me what to do to solve the problem please?

thank you for you time.

Re: Hello everyone

Marvin Rhoads — Thu, 23 Jan 2020 02:48:25 GMT

@star1 your question was answered in the new thread you posted.

Please don't post the same question multiple times.