topic Re: Buggy Behaviour in SFR in Network Security

Buggy Behaviour in SFR

Shazz — Mon, 11 Apr 2022 14:46:08 GMT

Hi guys,

ASA5545 with IPS Module

The ASA is running ASA-9.14(3)11

The Firepower modules are 6.4.0.12

While troubleshooting an SNMP polling issue I came across this buggy behaviour

> SFR dropping SNMP UDP packets, When we change SFR mode to monitor only it all works, When we change it back to fail-open and still its working.

Can you please advise?

Thanks.

Re: Buggy Behaviour in SFR

balaji.bandi — Mon, 11 Apr 2022 15:41:30 GMT

is the SNMP not working what device ASA ?

Re: Buggy Behaviour in SFR

Shazz — Mon, 11 Apr 2022 15:55:02 GMT

Hi Balaji,

Its working after some configuration changes. The question is When we change SFR mode to Monitor only it all works, When we change it back to fail-open and still its working. When we change it to fail-open it should drop the traffic. Hope this helps. Thanks.

Re: Buggy Behaviour in SFR

Shazz — Mon, 11 Apr 2022 16:00:31 GMT

Hi Balaji,

The device and the running firmware version:

ASA5545 with IPS Module

The ASA is running ASA-9.14(3)11

The Firepower modules are 6.4.0.12

Thanks.