topic Re: ASA Frequent Failover post IPS installation in Network Security https://community.cisco.com/t5/network-security/asa-frequent-failover-post-ips-installation/m-p/1429355#M660092 <HTML><HEAD></HEAD><BODY><P>Hi Nagaraja,</P><P></P><P>We are observing intermittent response to the IPS module. Once or twice a day the IPS module is showing the error. The rest of the time it is functioning properly.</P><P></P><P>Regards</P><P>Shri</P></BODY></HTML> Fri, 06 Aug 2010 04:18:04 GMT shriprasad.rai 2010-08-06T04:18:04Z ASA Frequent Failover post IPS installation https://community.cisco.com/t5/network-security/asa-frequent-failover-post-ips-installation/m-p/1429353#M660090 <P>Hi All,</P><P> <BR />I have two ASA's configured on Active/ Standby failover mode. I am observing frequent failover (once or twice in a day) of ASA post IPS installation. The below logs were captured when the issue was observed</P><P> <BR /><STRONG style="color: #ff0000; ">%ASA-1-104001: (Secondary) Switching to ACTIVE - Service card in other unit has failed.<BR /></STRONG>%ASA-1-103005: (Secondary) Other firewall reporting failure.<BR />%ASA-1-105003: (Secondary) Monitoring on interface inside waiting<BR />%ASA-1-105003: (Secondary) Monitoring on interface Management waiting<BR />%ASA-1-105003: (Secondary) Monitoring on interface outside waiting<BR />%ASA-1-105004: (Secondary) Monitoring on interface outside normal<BR />%ASA-1-105004: (Secondary) Monitoring on interface inside normal<BR />%ASA-1-105004: (Secondary) Monitoring on interface Management normal<BR /><STRONG style="color: #ff0000; ">%ASA-1-104001: (Primary) Switching to ACTIVE - Service card in other unit has failed.<BR /></STRONG>%ASA-1-105003: (Primary) Monitoring on interface inside waiting</P><P> <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </P><P># sh failover&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </P><P>Failover On</P><P>Failover unit Primary</P><P>Failover LAN Interface: failover GigabitEthernet0/2 (up)</P><P>Unit Poll frequency 1 seconds, holdtime 15 seconds</P><P>Interface Poll frequency 5 seconds, holdtime 25 seconds</P><P>Interface Policy 1</P><P>Monitored Interfaces 3 of 250 maximum</P><P>Version: Ours 8.2(1), Mate 8.2(1)</P><P>Last Failover at: 10:30:02 EDT Jul 30 2010</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; This host: Primary - Active</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Active time: 19892950 (sec)</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; slot 0: ASA5520 hw/sw rev (2.0/8.2(1)) status (Up Sys)</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface inside (X.X.X.X): Normal (Waiting)</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface outside (X.X.X.X): Normal (Waiting)</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface 1 (X.X.X.X): Normal (Not-Monitored)</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface 2 (X.X.X.X): Normal (Not-Monitored)</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface 3 (X.X.X.X): Normal (Not-Monitored)</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface 4(X.X.X.X): Normal (Not-Monitored)</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface 5 (X.X.X.X): Normal (Waiting)</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; slot 1: ASA-SSM-20 hw/sw rev (1.0/6.0(6)E3) status (Up/Up)</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IPS, 6.0(6)E3, Up</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Other host: Secondary - Failed</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Active time: 785557 (sec)</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; slot 0: ASA5520 hw/sw rev (2.0/8.2(1)) status (Up Sys)</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface inside (X.X.X.X): Normal (Waiting)</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface outside (X.X.X.X): Normal (Waiting)</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface 1 (X.X.X.X): Normal (Not-Monitored)</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface 2 (X.X.X.X): Normal (Not-Monitored)</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface 3 (X.X.X.X): Normal (Not-Monitored)</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface 4 (X.X.X.X): Normal (Not-Monitored)</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface 5 (X.X.X.X): Normal (Waiting)</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <STRONG style="color: #ff0000; ">slot 1: ASA-SSM-20 hw/sw rev (1.0/6.0(6)E3) status (Unresponsive/Up)</STRONG></P><P><STRONG style="color: #ff0000; ">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IPS, 6.0(6)E3, Not Applicable</STRONG></P><P><BR />Stateful Failover Logical Update Statistics</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Link : failover GigabitEthernet0/2 (up)</P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Stateful Obj&nbsp;&nbsp;&nbsp; xmit&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; xerr&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; rcv&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; rerr&nbsp;&nbsp;&nbsp;&nbsp; </P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; General&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2030603195 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 82242427&nbsp;&nbsp; 4944&nbsp;&nbsp;&nbsp;&nbsp; </P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; sys cmd&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2756890&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2756889&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; up time&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; RPC services&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; TCP conn&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1847488044 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 59450555&nbsp;&nbsp; 1807&nbsp;&nbsp;&nbsp;&nbsp; </P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; UDP conn&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 179421678&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 19953293&nbsp;&nbsp; 3137&nbsp;&nbsp;&nbsp;&nbsp; </P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ARP tbl&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 579874&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 42409&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Xlate_Timeout&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; VPN IKE upd&nbsp;&nbsp;&nbsp;&nbsp; 98532&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 6954&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; VPN IPSEC upd&nbsp;&nbsp; 257947&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 32209&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; VPN CTCP upd&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; VPN SDI upd&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0 </P><P></P><P><BR />The failover status under normal conditions</P><P><BR /># sh failover<BR />Failover On <BR />Failover unit Primary<BR />Failover LAN Interface: failover GigabitEthernet0/2 (up)<BR />Unit Poll frequency 1 seconds, holdtime 15 seconds<BR />Interface Poll frequency 5 seconds, holdtime 25 seconds<BR />Interface Policy 1<BR />Monitored Interfaces 3 of 250 maximum<BR />Version: Ours 8.2(1), Mate 8.2(1)<BR />Last Failover at: 10:30:02 EDT Jul 30 2010<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; This host: Primary - Active <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Active time: 19893087 (sec)<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; slot 0: ASA5520 hw/sw rev (2.0/8.2(1)) status (Up Sys)<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface inside (X.X.X.X): Normal <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface outside (X.X.X.X): Normal <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface 1 (X.X.X.X): Normal (Not-Monitored)<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface 2 (X.X.X.X): Normal (Not-Monitored)<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface 3 (X.X.X.X): Normal (Not-Monitored)<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface 4 (X.X.X.X): Normal (Not-Monitored)<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface 5 (X.X.X.X): Normal <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; slot 1: ASA-SSM-20 hw/sw rev (1.0/6.0(6)E3) status (Up/Up)<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IPS, 6.0(6)E3, Up<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Other host: Secondary - Standby Ready <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Active time: 785557 (sec)<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; slot 0: ASA5520 hw/sw rev (2.0/8.2(1)) status (Up Sys)<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface inside (X.X.X.X): Normal <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface outside (X.X.X.X): Normal <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface 1 (X.X.X.X): Normal (Not-Monitored)<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface 2 (X.X.X.X): Normal (Not-Monitored)<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface 3 (X.X.X.X): Normal (Not-Monitored)<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface 4 (X.X.X.X): Normal (Not-Monitored)<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Interface 5 (X.X.X.X): Normal <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; slot 1: ASA-SSM-20 hw/sw rev (1.0/6.0(6)E3) status (Up/Up)<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IPS, 6.0(6)E3, Up</P> Mon, 11 Mar 2019 18:21:35 GMT https://community.cisco.com/t5/network-security/asa-frequent-failover-post-ips-installation/m-p/1429353#M660090 shriprasad.rai 2019-03-11T18:21:35Z Re: ASA Frequent Failover post IPS installation https://community.cisco.com/t5/network-security/asa-frequent-failover-post-ips-installation/m-p/1429354#M660091 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>If the firewall sees that the IPS module is not responding, as per the failover configuration, it will failover to the secondary device. This is normal process. One thing you could do is reseat the card and see if that helps. Also, I noticed that the software on the card is not the latest. You could try upgrading the software and see if that helps.</P><P></P><P>Regards,</P><P></P><P>NT</P></BODY></HTML> Fri, 06 Aug 2010 04:03:03 GMT https://community.cisco.com/t5/network-security/asa-frequent-failover-post-ips-installation/m-p/1429354#M660091 Nagaraja Thanthry 2010-08-06T04:03:03Z Re: ASA Frequent Failover post IPS installation https://community.cisco.com/t5/network-security/asa-frequent-failover-post-ips-installation/m-p/1429355#M660092 <HTML><HEAD></HEAD><BODY><P>Hi Nagaraja,</P><P></P><P>We are observing intermittent response to the IPS module. Once or twice a day the IPS module is showing the error. The rest of the time it is functioning properly.</P><P></P><P>Regards</P><P>Shri</P></BODY></HTML> Fri, 06 Aug 2010 04:18:04 GMT https://community.cisco.com/t5/network-security/asa-frequent-failover-post-ips-installation/m-p/1429355#M660092 shriprasad.rai 2010-08-06T04:18:04Z Re: ASA Frequent Failover post IPS installation https://community.cisco.com/t5/network-security/asa-frequent-failover-post-ips-installation/m-p/1429356#M660093 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>Have you tried to reseat the card? Also, have you considered upgrading the code on the card?</P><P></P><P>Regards,</P><P></P><P>NT</P></BODY></HTML> Fri, 06 Aug 2010 04:32:41 GMT https://community.cisco.com/t5/network-security/asa-frequent-failover-post-ips-installation/m-p/1429356#M660093 Nagaraja Thanthry 2010-08-06T04:32:41Z Re: ASA Frequent Failover post IPS installation https://community.cisco.com/t5/network-security/asa-frequent-failover-post-ips-installation/m-p/1429357#M660094 <HTML><HEAD></HEAD><BODY><P>Hi Nagaraja,</P><P></P><P>Will follow your advice. It might take sometime for us to get it done. Thanks!</P><P></P><P>Regards</P><P>Shri</P></BODY></HTML> Sat, 07 Aug 2010 09:06:05 GMT https://community.cisco.com/t5/network-security/asa-frequent-failover-post-ips-installation/m-p/1429357#M660094 shriprasad.rai 2010-08-07T09:06:05Z Re: ASA Frequent Failover post IPS installation https://community.cisco.com/t5/network-security/asa-frequent-failover-post-ips-installation/m-p/1429358#M660095 <HTML><HEAD></HEAD><BODY><P>Hi Nagaraja,</P><P></P><P>Thanks for your inputs. The issue was resolved after reseating the card.</P><P></P><P>Regards</P><P>Shri</P></BODY></HTML> Mon, 30 Aug 2010 09:31:25 GMT https://community.cisco.com/t5/network-security/asa-frequent-failover-post-ips-installation/m-p/1429358#M660095 shriprasad.rai 2010-08-30T09:31:25Z