topic Re: Cannot login to Firepower from ASDM in Network Security

Cannot login to Firepower from ASDM

benalihoussem1994 — Thu, 24 Aug 2023 16:32:09 GMT

Hello guys, i'm facing an issue loggign in to asa with firepower module installed on it, yesterday we were applying an access control policy rule, today when i tried to login, ASDM stuck on 28% "authenticating firepower login" then after sometime it bypasses firepower and show only firewall configurations, but i can login when the firewall is standby. i couldn't login to session sfr as well,

any idea please on how to solve this?

Re: Cannot login to Firepower from ASDM

balaji.bandi — Thu, 24 Aug 2023 17:06:28 GMT

check the logs - what version of code, if get chance reboot and test it ?

Re: Cannot login to Firepower from ASDM

benalihoussem1994 — Thu, 24 Aug 2023 20:17:23 GMT

yes tried to reboot but same issue, but while logging in to Firepower, i found these logs,

Aug 24 2023 19:11:37: %ASA-7-725012: Device chooses cipher ECDHE-RSA-AES256-GCM-SHA384 for the SSL session with client Inside:192.168.60.21/61002 to 10.1.1.1/443 Aug 24 2023 19:11:37: %ASA-6-725016: Device selects trust-point ASDM_TrustPoint-2022 for client Inside:192.168.60.21/61002 to 10.1.1.1/443 Aug 24 2023 19:11:37: %ASA-6-725002: Device completed SSL handshake with client Inside:192.168.60.21/61002 to 10.1.1.1/443 for TLSv1.2 session Aug 24 2023 19:11:37: %ASA-6-725007: SSL session with client Inside:192.168.60.21/61002 to 10.1.1.1/443 terminated Aug 24 2023 19:11:37: %ASA-6-302014: Teardown TCP connection 581960 for Inside:192.168.60.21/61002 to identity:10.1.1.1/443 duration 0:00:00 bytes 3964 TCP Reset-O from identity Aug 24 2023 19:11:37: %ASA-6-106015: Deny TCP (no connection) from 192.168.60.21/61002 to 10.1.1.1/443 flags FIN ACK on interface Inside Aug 24 2023 19:11:37: %ASA-7-710005: TCP request discarded from 192.168.60.21/61002 to Inside:10.1.1.1/443 Aug 24 2023 19:11:37: %ASA-6-302013: Built inbound TCP connection 581966 for Inside:192.168.60.21/61003 (192.168.60.21/61003) to identity:10.1.1.1/443 (10.1.1.1/443) Aug 24 2023 19:11:37: %ASA-6-725001: Starting SSL handshake with client Inside:192.168.60.21/61003 to 10.1.1.1/443 for unknown session Aug 24 2023 19:11:37: %ASA-6-725003: SSL client Inside:192.168.60.21/61003 to 10.1.1.1/443 request to resume previous session Aug 24 2023 19:11:37: %ASA-6-725002: Device completed SSL handshake with client Inside:192.168.60.21/61003 to 10.1.1.1/443 for TLSv1.2 session Aug 24 2023 19:11:37: %ASA-6-725007: SSL session with client Inside:192.168.60.21/61003 to 10.1.1.1/443 terminated

firepower 7.0.3 installed on ASA 5516,

Re: Cannot login to Firepower from ASDM

balaji.bandi — Fri, 25 Aug 2023 07:10:25 GMT

We see the Client Terminated on the Logs

firepower 7.0.3 installed on ASA 5516,

Just to clarify, You have Firepower Service Module installed in ASA running 7.0.3 ? or You have Firepower re-imaged on ASA Model ?

ASA code Managed by ASDM

Firepower image (FTD) - Managed by FDM or FMC

but i can login when the firewall is standby.

Why not Failover and check is this accessed by ASDM ?

On the primary if you able to Logging using SSH - can you post below output

show version

show module

show module sfr detail

what outcome you get when you login from console to #session sfr console ?

Re: Cannot login to Firepower from ASDM

benalihoussem1994 — Wed, 30 Aug 2023 14:05:55 GMT

Hi,

ASA version 9.16

ASDM version 7.16(1)150

yes when the firwall is on standby i can access ASDM normally.
here's the output

sh version:

show module

Show module sfr details:

I get login incorrect when i try session sfr

Re: Cannot login to Firepower from ASDM

benalihoussem1994 — Wed, 30 Aug 2023 13:24:31 GMT

Hello,

Asdm version: 7.16(1)150

ASA version: 9.16

Firepower version: 7.0.3

I now lost login to firepower on standby ASA, tried failover and also

Below requested output:

Show version:

Sh module:

Show module sfr detail

does firepower lockout users after failed logins?

session sfr fails to login also.

Re: Cannot login to Firepower from ASDM

benalihoussem1994 — Mon, 28 Aug 2023 12:12:09 GMT

Hi guys, it turns out that i'm forbidden to login to sfr due to many login attempts, i tried to reset the password through session sfr do password-reset, i get invalid do command password reset

i couldn't find anyway to login, is there a way to interrupt sfr boot and unlock my account?

Re: Cannot login to Firepower from ASDM

benalihoussem1994 — Sat, 02 Sep 2023 12:55:09 GMT

Hello,

Issue is solved, we found the last password used for sfr module and we were able to login again.