topic Re: FMC Interface 'DataplaneInterface0' is not receiving any packets in Network Security

FMC Interface 'DataplaneInterface0' is not receiving any packets

TharasuKoonharn36667 — Wed, 21 Sep 2022 07:48:00 GMT

We have a HA pair of ASA 5508-X configured as active/standby and installed FirePower on each device.

In FMC, we get the error "Interface 'DataplaneInterface0' is not receiving any packets" for the standby device as below.

Do you have any other approach/ideas to resolve the issue?

Thank you in advance.

Re: FMC Interface 'DataplaneInterface0' is not receiving any packets

Rakshith MN — Wed, 21 Sep 2022 08:30:30 GMT

The standby unit not receiving any packets/traffic, the detail is that this alert is normal. Although we know that the ASA's are in HA, the SFR modules are registered separately in the FMC, for this reason the FMC does not know that these modules[Firepower] are part of an HA.

The module [Firepower] installed on the standby ASA is not processing traffic, which is why this alert appears.

If you want to eliminate this alert, you need to disable interface monitoring, inside health policy.

Re: FMC Interface 'DataplaneInterface0' is not receiving any packets

Mark Elsen — Wed, 21 Sep 2022 08:46:45 GMT

- FYI : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCur52789

Re: FMC Interface 'DataplaneInterface0' is not receiving any packets

TharasuKoonharn36667 — Wed, 21 Sep 2022 08:59:30 GMT

Thank you for your answer. I have a few question.

Will we find the same alert on the Primary device if there is a failover?

Do we need to manually edit the interface monitoring all the time?

Re: FMC Interface 'DataplaneInterface0' is not receiving any packets

TharasuKoonharn36667 — Wed, 21 Sep 2022 09:01:42 GMT

Thank you for your answer.

According to the bug CSCur52789, don't we have a solution to fix it?

Re: FMC Interface 'DataplaneInterface0' is not receiving any packets

Sheraz.Salim — Wed, 21 Sep 2022 09:32:51 GMT

Correct. We run number of HA pair firewall. is there is specific ask for it why you want to disable/edit the monitoring. as mentioned @Rakshith MN ASA sfr sensor is not seen as HA pair by the FMC point of view. however, if the failover triggered manually or due to network issue the active asa sfr will in service and standby will show you again no data received.

Re: FMC Interface 'DataplaneInterface0' is not receiving any packets

Sheraz.Salim — Wed, 21 Sep 2022 09:34:26 GMT

The bug mentioned your unit ASA-5508-X so no work around is provided. also to make your aware these ASA boxes are gong end of life. something you might consider near future to upgrade to FTD-1001 or 2100 models

Re: FMC Interface 'DataplaneInterface0' is not receiving any packets

TharasuKoonharn36667 — Thu, 22 Sep 2022 04:18:33 GMT

Thank you @Sheraz.Salim @Rakshith MN ,

Do I need to disable the monitoring on both(Primary/Secondary)?

Re: FMC Interface 'DataplaneInterface0' is not receiving any packets

Sheraz.Salim — Thu, 22 Sep 2022 04:48:17 GMT

I have double check if you disable the interface monitoring. It will disable it for your both firewalls.

Here look this document step by step instructions how to disable the data interface monitoring for each single device/HA pair.

Re: FMC Interface 'DataplaneInterface0' is not receiving any packets

TharasuKoonharn36667 — Thu, 22 Sep 2022 08:02:21 GMT

@Sheraz.Salim Thank you for your support.