topic CSM error message on ASA Failover interface in Network Security

CSM error message on ASA Failover interface

patoberli — Tue, 12 Mar 2019 01:29:12 GMT

Hello

We use CSM 4.4 to manage our ASA firewalls.

One of them is a failover pair. CSM now always creates a warning message when approving an activity, stating:

FWSVC Access Rules Warnings -> The following interfaces GigabitEthernet0/3,management, are not bound to any Access Rules and remain wide open for traffic to lower security level interfaces

Is there a way to surpress those messages?

Or is it required to configure an access-list to the lan-based failover interface?

Thanks

Patrick

CSM error message on ASA Failover interface

Ramraj Sivagnanam Sivajanam — Wed, 24 Apr 2013 06:16:46 GMT

Hi Bro

Yes, there is a way to suppress these error messages by issuing the command "no logging message " in that particular context but I wouldn't advise to do so.

Perhaps, this could indicate a legitimate error on your part. If you could paste the show run output here, that would be great. We could advice your accordingly.

Regards,

Ram

CSM error message on ASA Failover interface

patoberli — Wed, 24 Apr 2013 06:42:44 GMT

I maybe didn't write it clear enought. This is CSM which is creating this "error message" on the base that some of my interfaces don't have a name (they are shut down).

What I wonder now, is there a possibility to stop this unneeded message informing me that my not used interfaces don't have a name.

CSM error message on ASA Failover interface

Ramraj Sivagnanam Sivajanam — Wed, 24 Apr 2013 06:51:03 GMT

Hi Bro

Do you see these error messages, when you issue the command 'show logging'?

CSM error message on ASA Failover interface

patoberli — Wed, 24 Apr 2013 06:55:12 GMT

I see several thousand of messages, but not really any error message. Don't forget, it has nothing to do with deploying (writing the config to the ASA), it has to do with approving (saving made changes in the access rules). It's only a CSM thing as far as I can see.