https://community.cisco.com/t5/network-security/cisco-asa-ips-module-crashes-randomly/m-p/2920122#M44105 <P>Hi All,</P> <P>I have an ASA 55xx firewall where ASA-SSM-20 is installed and running with version 7.1(10)E4, device has a valid license as well.<BR />The IPS module is getting rebooted automatically once in 2-3 days, and below are the logs captured during the problem.<BR />Can someone assist in finding the cause and fix for this issue.</P> <P><BR />signature version:-<BR />==============<BR />Signature Update&nbsp;&nbsp;&nbsp; S912.0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2016-03-04</P> <P>From the logs, i got only errSystemError - Card Manager error -1 as a suspected log.</P> <P></P> <P></P> <P>28Mar2016 18:43:28.470 0.612 mainApp[1019] Cid/E errSystemError AppManager::AppManager - Application path does not exist: /usr/cids/idsRoot/bin/switchApp<BR />Begin syslogReader<BR />28Mar2016 18:43:28.612 0.142 mainApp[1019] Cid/E errSystemError MainAppCfg::readRecoveryHostFile - error trying to restore network settings<BR />28Mar2016 18:43:28.638 0.026 mainApp[1019] IdsEventStore/W errWarning -- Event store open archive for input failed [IdsEventStore::Data::Data()]<BR />28Mar2016 18:43:28.638 0.000 mainApp[1019] IdsEventStore/W errWarning -- Event store set to default size [IdsEventStore::Data::Data()]<BR />28Mar2016 18:43:28.643 0.005 mainApp[1019] IdsEventStore/W errWarning Event store circular buffer may be in an invalid state, recovering ... [IdsEventStore::init()]<BR />28Mar2016 18:43:52.373 0.000 logApp[1203] Cid/W Disabled status event logging for status category: controlTransaction<BR />28Mar2016 18:43:53.560 1.187 interface[1205] Cid/W errWarning Inline data bypass has started due to reason unknown.<BR />28Mar2016 18:43:56.494 2.934 sensorApp[1235] sensorApp/W The AIC (application-policy) engine will soon be deprecated and is off by default. The application-policy-enforcement-http signatures won't be built<BR />28Mar2016 18:43:56.539 0.045 collaborationApp[1237] Cid/W Warning - DNS or HTTP proxy is required for global correlation inspection and reputation filtering but no DNS or proxy servers are defined.<BR />Add an HTTP proxy server or DNS server in the 'host' service configuration.<BR />28Mar2016 18:44:05.482 8.943 cidwebserver[1212] tls/W errTransport WebSession::sessionTask TLS connection exception: handshake incomplete.<BR />Messages, like this one, in the category - TLS connection failure - were logged 1 times in the last 0 seconds.<BR />28Mar2016 18:44:35.857 1.452 sensorApp[1235] Cid/W AnalysisEngine reconfiguration complete.<BR />28Mar2016 18:44:35.859 0.002 mainApp[1019] Cid/E errSystemError - Card Manager error -1: cmgr_send_version_msg [F1ControlPlane::checkCmgrResult]<BR />28Mar2016 18:44:35.878 0.019 interface[1205] Cid/W errWarning Inline data bypass has stopped.</P> <P></P> <P></P> <P></P> Sun, 10 Mar 2019 13:34:50 GMT secureIT 2019-03-10T13:34:50Z https://community.cisco.com/t5/network-security/cisco-asa-ips-module-crashes-randomly/m-p/2920122#M44105 Hi All, I have an ASA 55xx firewall where ASA-SSM-20 is installed and running with version 7.1(10)E4, device has a valid license as well. The IPS module is getting rebooted automatically once in 2-3 days, and below are the logs captured during the problem. Can someone assist in finding the cause and fix for this issue. signature version:- ============== Signature Update S912.0 2016-03-04 From the logs, i got only errSystemError - Card Manager error -1 as a suspected log. Sun, 10 Mar 2019 13:34:50 GMT https://community.cisco.com/t5/network-security/cisco-asa-ips-module-crashes-randomly/m-p/2920122#M44105 secureIT 2019-03-10T13:34:50Z https://community.cisco.com/t5/network-security/cisco-asa-ips-module-crashes-randomly/m-p/2920123#M44107 <P>It could very well be a hardware issue.</P> <P>Since you have a current IPS subscription service, you must also have TAC support on the hardware as that's a prerequisite on the older type of IPS. So I'd recommend going straight to a TAC case.</P> Tue, 29 Mar 2016 13:26:09 GMT https://community.cisco.com/t5/network-security/cisco-asa-ips-module-crashes-randomly/m-p/2920123#M44107 Marvin Rhoads 2016-03-29T13:26:09Z