CSC-SSM error

chrisdims — Mon, 11 Mar 2019 23:28:19 GMT

Hi,

Although my CSC-SSM module is down, I am stille getting the following error:

%ASA-3-421001: TCP|UDP flow from interface_name:IP_address/port to 
interface_name:IP_address/port is dropped because application has failed.

A packet was dropped because the CSC SSM application failed. By default, this message is rate limited to 1 message every 10 seconds.

The module details are:

Mod Card Type Model Serial No.

--- -------------------------------------------- ------------------ -----------

1 ASA 5500 Series Content Security Services Mo ASA-SSM-CSC-10-K9 JAF13000FJK

Mod MAC Address Range Hw Version Fw Version Sw Version

--- --------------------------------- ------------ ------------ ---------------

1 0023.ebc4.1cc9 to 0023.aaaa.bbbb 1.0 1.0(11)5

Mod SSM Application Name Status SSM Application Version

--- ------------------------------ ---------------- --------------------------

Mod Status Data Plane Status Compatibility

--- ------------------ --------------------- -------------

1 Down Not Applicable

Please advice.

Thank you,

Christos.

Dinkar Sharma — Tue, 10 Jul 2012 23:06:37 GMT

Hi Chris,

What is the action Defind in policy MAP for CSC?

hostname(config−pmap−c)#csc {fail−close | fail−open}

Regards,

Dinkar

Re: CSC-SSM error

chrisdims — Wed, 11 Jul 2012 09:00:00 GMT

Hi Dinkar,

Thank you for your reply.

The csc is allowed the traffic if failed (#csc fail-open).

Best Regards,

Chris.