topic Re: Troubleshooting ASA Failing over in Network Security

Troubleshooting ASA Failing over

KGrev — Tue, 14 Dec 2021 18:17:52 GMT

Novice Here,

Occasionally, my asa's will failover to seconday/active. Im able to fail them back to primary/active with no issues.

I need help figuring out what is causing the failover. Is there a log anywhere I can troubleshoot with to signify an issue?

Thank you for any advice.

Re: Troubleshooting ASA Failing over

Marvin Rhoads — Tue, 14 Dec 2021 18:40:52 GMT

Look at the "show failover history" output on both appliances.

Re: Troubleshooting ASA Failing over

KGrev — Tue, 14 Dec 2021 19:07:12 GMT

I attached a photo above. Please let me know if you cannot see it. I'm gathering that there was an issue with my inside interface on my active Firewall?

Re: Troubleshooting ASA Failing over

Marvin Rhoads — Thu, 16 Dec 2021 11:36:51 GMT

Correct. The interface went down - most often due to the cabling or the downstream device to which it is connected.

Re: Troubleshooting ASA Failing over

KGrev — Tue, 14 Dec 2021 19:51:12 GMT

Marvin,

I've looked at the logs for the inside connected device, in this case a cisco 6500, I dont see any interfaces go down for this time period.

Is there a more valuable resource other than "show logging" I could try on this device?

Thank you

Re: Troubleshooting ASA Failing over

Marvin Rhoads — Thu, 16 Dec 2021 11:38:32 GMT

The interface check fail can also be due to inability to reach the peer device on its interface standby address when one is configured. So there could have been something related to that causing the failover event.