topic Re: ASA 5516 - user-message in Network Security

ASA 5516 - user-message

BigK — Fri, 21 Feb 2020 16:35:28 GMT

Hello,

I am upgrading to 5516

Cisco Adaptive Security Appliance Software Version 9.5(1)
Device Manager Version 7.5(1)

on my old fw I see the command below

F03# sho run | i user-message
user-message "This is not a company Asset"

I am not able to locate the command user-message on my new FW

Re: ASA 5516 - user-message

balaji.bandi — Wed, 19 Dec 2018 22:06:19 GMT

what is the new FW and what version of code is that ?

Re: ASA 5516 - user-message

BigK — Wed, 19 Dec 2018 23:31:10 GMT

That is the new fw ASA 5516. All the info are on the post.

Thanks

Re: ASA 5516 - user-message

Kasun Bandara — Thu, 20 Dec 2018 04:31:50 GMT

what is the OLD firewall model and OS version?

Re: ASA 5516 - user-message

balaji.bandi — Thu, 20 Dec 2018 08:52:04 GMT

can you provide full information :

what is the new FW and what version of code is that ?

Re: ASA 5516 - user-message

Marvin Rhoads — Thu, 20 Dec 2018 09:53:41 GMT

The command is only available if you are in "config" and then "dynamic-access-policy-record" mode.

See the following excerpt from the ASA command reference:

user-message

To specify a text message to display when a DAP record is selected, use the user-message command in
dynamic-access-policy-record mode. To remove this message, use the no version of the command. If you
use the command more than once for the same DAP record, the newer message replaces the previous
message.

Re: ASA 5516 - user-message

Rahul Govindan — Thu, 20 Dec 2018 14:07:02 GMT

To add to what @Marvin Rhoads mentioned, if you just copied your config from your old Firewall to the new one, then your DAP rules might not have copied over. DAP configuration is a combination of dap.xml files and ASA commands. You need to do a backup and restore to get the full copy of all files to the new Firewall.