topic Re: Reboot ASA firewall in Network Security

Reboot ASA firewall

abhisheksingh757821668 — Sat, 30 Nov 2019 07:15:53 GMT

HI Team,

We have managed Cisco ASA 5585X firewall which is active passive cluster node so when we are add a new port on a single existing rule and push the policy then firewall's both node's was reboot. This issue is only presets on a single particular rule .

Those Firewall rule has a 6 object in source and 7 object in destination and already 50 ports/services are added in existing rule.

We are facing this issue since last 3 time on same rule but whenever we add a port on other rule then firewall was working fine.

Please provide the resolution.

Regards,

Abhishek

Re: Reboot ASA firewall

balaji.bandi — Sat, 30 Nov 2019 17:29:23 GMT

I should not belive pushing rule caused a reboot of FW.

if possible can you post the version of FW running and full config, explain what rule it was causing this issue.

have you captured any logs while you installing policy on a background see what is happening on the console?

Re: Reboot ASA firewall

abhisheksingh757821668 — Sun, 01 Dec 2019 16:08:40 GMT

Hi Sir,

ASA Firewall version is 9.1 and hardware model is Cisco ASA 5585X.

This issue occur only one specific rule. When we are open RPC dynamic replication ports between two Exchange servers.

When we are add a single port on existing rule in GUI console and press OK and save, So console has showing processing wizard. Then firewall is showing standby mode and then reboot a active node and after few minutes firewall was working fine. But exchange port was not added on a rule.

Console has not showing and error/warning etc.

Please suggest if any limitation on adding ports/services on single rule.

Regards,

Abhishek

Re: Reboot ASA firewall

balaji.bandi — Sun, 01 Dec 2019 19:26:33 GMT

To be honest I have not clearly understood the problem still here. but you always required to push or publish policies on the Active FW., not from Standby.

i have ever seen the problem you described here. further assistance required you need to provide the config again.

Re: Reboot ASA firewall

abhisheksingh757821668 — Mon, 02 Dec 2019 08:27:32 GMT

Hi Sir,

Sorry!!

We can't provide any internal ASA firewall configuration details of client.

Regards,

Abhishek

Re: Reboot ASA firewall

Marvin Rhoads — Mon, 02 Dec 2019 09:36:17 GMT

Recommend opening a TAC case if you cannot share details here.