topic Re: ASA5555 with Firepower Service error in Network Security

ASA5555 with Firepower Service error

cuongnp — Mon, 23 Nov 2020 04:10:15 GMT

Hi guys,

I have an error as pictures below and I do not know why and how to fix it.

I appreciate if there is any help from all of you.

for more details:

- The error occurs on Standby device, the Master work properly.

- There is no log of this error.

If you need more info, please let me know.

thanks a lot.

CuongNP.

Re: ASA5555 with Firepower Service error

Marvin Rhoads — Mon, 23 Nov 2020 13:56:57 GMT

For an ASA HA pair, the primary and standby units' Firepower service modules must each be configured separately to be locally managed (i.e. by ASDM as is implied by your screenshot) or registered to FMC.

Please log into the cli of the standby device and share the output of:

show module sfr detail

Re: ASA5555 with Firepower Service error

cuongnp — Tue, 24 Nov 2020 02:32:34 GMT

Here is information you ask

Re: ASA5555 with Firepower Service error

Marvin Rhoads — Tue, 24 Nov 2020 12:19:32 GMT

Hmm. that looks OK.Have you installed the Control license?

Is it possible to switch the associated ASA to active role and check it in ASDM after doing that?

Re: ASA5555 with Firepower Service error

cuongnp — Thu, 26 Nov 2020 10:01:11 GMT

"Is it possible to switch the associated ASA to active role and check it in ASDM after doing that?"

-> yes, it is. but the new active one still have same error.

Please take a look at pictures below for the license and version info.

Re: ASA5555 with Firepower Service error

Marvin Rhoads — Thu, 26 Nov 2020 12:19:55 GMT

The version information you shared is all about the parent ASA. The issue is on the Firepower service module.

What about the answer regarding "Have you installed the Control license?"

Re: ASA5555 with Firepower Service error

cuongnp — Thu, 26 Nov 2020 16:08:22 GMT

Can you please send me the guide document how to install it? As I know it is perpetual license come along with the device, right?

Re: ASA5555 with Firepower Service error

Marvin Rhoads — Fri, 27 Nov 2020 12:31:00 GMT

The control license is a free license that should come as a PAK printed on a cardboard insert with the new ASA with Firepower service module (or when separately ordered). It is perpetual.

You go the the Licenses section of the ASDM Firepower Configuration tab and get a License key there. You then use in with the PAK at software.cisco.com to get a license file (.lic) which you open in a text editor to put into ASDM and license the module.

Re: ASA5555 with Firepower Service error

cuongnp — Thu, 03 Dec 2020 09:10:41 GMT

Much appreciated.

🙂