topic Software ASA CX Installation propblem in Network Security

Software ASA CX Installation propblem

sqambera — Tue, 12 Mar 2019 03:00:13 GMT

Hello,

I have two ASA firewalls configured in failover. I was trying to install software CX module on both. However, on secondary ASA its giving problem and not showing up in the "show module cx detail". I am attaching the output of same command on both ASA. If anyone can please help to resolve it.

Btw, I also did reimaging which didn't help either. Is there a way to proble whether the image downloaded on the ASA doesn't contain any error. Thanks.

Software ASA CX Installation propblem

Marvin Rhoads — Tue, 05 Nov 2013 04:14:43 GMT

I've not seen that particular discrepancy (card type and model not displaying) before.

What does a simple "show module" show on the secondary ASA?

Can you log into the PRSM GUI on the secondary unit?

Software ASA CX Installation propblem

sqambera — Tue, 05 Nov 2013 15:35:43 GMT

Hi Marvin,

Yes I can log into PRSM GUI. Here is the output of "show module":

Mod Card Type Model Serial No.

---- -------------------------------------------- ------------------ -----------

0 ASA 5525-X with SW, 8 GE Data, 1 GE Mgmt, AC ASA5525 FCH1710J2NL

ips Unknown N/A FCH1710J2NL

cxsc Unknown N/A FCH1710J2NL

Mod MAC Address Range Hw Version Fw Version Sw Version

---- --------------------------------- ------------ ------------ ---------------

0 4c4e.35ea.daef to 4c4e.35ea.daf8 1.0 2.1(9)8 9.1(3)

ips 4c4e.35ea.daed to 4c4e.35ea.daed N/A N/A

cxsc 4c4e.35ea.daed to 4c4e.35ea.daed N/A N/A 9.2.1.1

Mod SSM Application Name Status SSM Application Version

---- ------------------------------ ---------------- --------------------------

ips Unknown No Image Present Not Applicable

cxsc ASA CX Up 9.2.1.1

Mod Status Data Plane Status Compatibility

---- ------------------ --------------------- -------------

0 Up Sys Not Applicable

ips Unresponsive Not Applicable

cxsc Up Up

Mod License Name License Status Time Remaining

---- -------------- --------------- ---------------

ips IPS Module Disabled perpetual

Software ASA CX Installation propblem

Marvin Rhoads — Tue, 05 Nov 2013 15:50:37 GMT

That certainly does look odd and is even more perplexing since you can log into on-box PRSM on the secondary unit. Other than the cosmetic error, what are the signs that it is functionally not working?

It may be time to punt this one to the TAC.

Software ASA CX Installation propblem

sqambera — Tue, 05 Nov 2013 16:03:47 GMT

When I am trying to add ASA under "Add Device" in my PRSM server, its giving the error "CX Module not present for standby ASA". The error is coming up in the first step of adding device "Connect to ASA" while I try to add either my primary or secondary ASA

Software ASA CX Installation propblem

jumora — Tue, 05 Nov 2013 18:07:22 GMT

Sincerely open a TAC case, I have only seen one case like this and it is not even resolved.