topic Re: All traffic service policy inspection broken in ASDM 7.8.2? in Network Security

All traffic service policy inspection broken in ASDM 7.8.2?

justin.cordesman — Fri, 21 Feb 2020 14:37:47 GMT

With ASDM 7.8.2 151 and ASA 9.8.2-8 it does not appear to be possible to create a service policy inspection rule that uses "all traffic" and the Firepower module.

With zero other rules, if I add a new service policy rule, choose global, then choose "any traffic" for the traffic match criteria, then click next and try to choose the ASA Firepower Inspection tab, I get a pop up window "you have specified default inspection as the traffic match criterion. Only inspect rule actions can be specified for the default inspection traffic." and cannot proceed. If I choose default inspection traffic and move forward, I can choose the ASA Firepower Inspection tab and enable firepower inspection.

Am I missing something?

Re: All traffic service policy inspection broken in ASDM 7.8.2?

mikael.lahtela — Mon, 06 Nov 2017 07:28:27 GMT

Hi,

Might be hitting this bug:
https://quickview.cloudapps.cisco.com/quickview/bug/CSCvg15782

br, Micke

Re: All traffic service policy inspection broken in ASDM 7.8.2?

justin.cordesman — Mon, 06 Nov 2017 13:07:32 GMT

Yeah, that bug looks like it exactly. I wonder what kind of unit testing Cisco is using for these releases when basic mission critical functions like "tell the ASA to use the firepower module to inspect traffic" and "actually open the log window when I click the button to open the log window" are broken and it is still released to customers.

Re: All traffic service policy inspection broken in ASDM 7.8.2?

Albert Succar — Mon, 06 Nov 2017 19:26:36 GMT

I'm having the exact issue. I went to enable netflow and was presented with this error message.

Re: All traffic service policy inspection broken in ASDM 7.8.2?

Boris Simunko — Fri, 10 Nov 2017 11:01:55 GMT

hey, you know, as long as you pay them for pruducts/services everything is OK

Re: All traffic service policy inspection broken in ASDM 7.8.2?

Marvin Rhoads — Wed, 06 Dec 2017 12:18:20 GMT

ASDM 7.9(1) was released this week. It includes a fix for that bug.

https://www.cisco.com/c/en/us/td/docs/security/asdm/7_9/release/notes/rn79.html#reference_k44_rd5_p1b

Re: All traffic service policy inspection broken in ASDM 7.8.2?

justin.cordesman — Sat, 09 Dec 2017 21:19:36 GMT

Yeah that fixed it, and in exchange on the device dashboard it no longer renders the digits for the number of clientless and anyconnect clients connected. Awesome QC there Cisco.

Re: All traffic service policy inspection broken in ASDM 7.8.2?

Marvin Rhoads — Sun, 10 Dec 2017 12:37:47 GMT

Yes I noticed that new bug as well.

They do show up in the Monitoring tab - just not on the ASDM home page.

Re: All traffic service policy inspection broken in ASDM 7.8.2?

Support Cisco — Tue, 17 Apr 2018 12:55:08 GMT

Hi,

I installed ASDM 7.9(2) the issue is resolved i can now navigate and changes parameters Rule Actions -> in all tab QOS, Connection Settings, NetFlow, ...

Thanks

Re: All traffic service policy inspection broken in ASDM 7.8.2?

AbsoluteBeginner — Thu, 23 Aug 2018 06:39:39 GMT

Thank you Mikael, that saved my day.