topic Missing Firepower Configuration Tab in ASDM in Network Security

Missing Firepower Configuration Tab in ASDM

limlayhin — Fri, 21 Feb 2020 16:57:36 GMT

I just recently install Firepower module into my pair of HA Cisco ASA 5525-X.

In my secondary firewall (it was my active firewall yesterday), I was able to access Firepower configuration Tab yesterday but today the tab is missing. I can only see "Firepower Status" Tab but cannot see "Firepower Dashboard" and "Firepower Reporting" Tab.

In Configuration panel, "Firepower Configuration" also missing.

I understand from other forum topic that this may be due to Java version issue. My java is running on latest version, which is version 8.

Strange thing is, my ASA is runnning on HA, and I am able to view all the Firepower tab in my primary firewall but not my secondary firewall. As such, I think Java is working fine in my client machine.

I tested using another client machine, same result. Primary firewall is OK but secondary firewall can't see all Firepower configuration tab.

Any help will be greatly appreciated.

Thanks..

Re: Missing Firepower Configuration Tab in ASDM

limlayhin — Wed, 20 Mar 2019 05:22:27 GMT

ASA version 9.9.2-40.

Firepower version 6.2.3-83

Re: Missing Firepower Configuration Tab in ASDM

Abheesh Kumar — Wed, 20 Mar 2019 06:11:04 GMT

hi,
You are able to view the configuration tab on Active Firewall right...
I think on the secondary configuration tab may not be appear as the configuration need to synced from the active one.

Hope This Helps
Abheesh

Re: Missing Firepower Configuration Tab in ASDM

Marvin Rhoads — Wed, 20 Mar 2019 06:55:28 GMT

Compare the output of "show module sfr detail" on both the Active and Standby ASA.

Ensure that the physical management interface is up/up on the switch where the Standby ASA connects.

Re: Missing Firepower Configuration Tab in ASDM

limlayhin — Mon, 25 Mar 2019 10:32:00 GMT

This is great info.

I found that in the Active Firewall, I can see management ip.

show module sfr details
Getting details from the Service Module, please wait...

Card Type: FirePOWER Services Software Module
Model: ASA5525
Hardware version: N/A
Serial Number: <removed>
Firmware version: N/A
Software version: 6.2.3-83
MAC Address Range: 88f0.3127.78ec to 88f0.3127.78ec
App. name: ASA FirePOWER
App. Status: Up
App. Status Desc: Normal Operation
App. version: 6.2.3-83
Data Plane Status: Up
Console session: Ready
Status: Up
DC addr: No DC Configured
Mgmt IP addr: 192.168.xx.xx
Mgmt Network mask: 255.255.255.0
Mgmt Gateway: 192.168.xx.xx
Mgmt web ports: 443
Mgmt TLS enabled: true

In my Standby firewall, the Management IP is missing.

show module sfr details
Getting details from the Service Module, please wait...
Unable to read details from module sfr

I login via session sfr, and I can see IP in eth0

> show interfaces eth0
----------------------[ eth0 ]----------------------
Physical Interface : eth0
Type : Management
Status : Enabled
MDI/MDIX : Auto
MTU : 1500
MAC Address : 88:F0:31:27:42:FF
IPv4 Address : 192.168.xx.xx
IPv4 Broadcast : 192.168.xx.255
RX Packets : 46383
RX Errors : 0
RX Drops : 0
RX Overruns : 0
RX Frame : 0
TX Packets : 79206
TX Errors : 0
TX Drops : 0
TX Overruns : 0
TX Carrier : 0
Collisions : 0
----------------------------------------------------

How can I make the interface eth0 ip appear in management ip?

Re: Missing Firepower Configuration Tab in ASDM

Abheesh Kumar — Tue, 26 Mar 2019 07:03:01 GMT

Hi,
Check the physical management interface of the secondary firewall is connected and up. also try reloading the sfr module and check.
sw-module module sfr reload

Hope this helps
Abheesh

Re: Missing Firepower Configuration Tab in ASDM

limlayhin — Mon, 01 Apr 2019 07:50:47 GMT

Management interface is up, I can ping the ip address.

Re: Missing Firepower Configuration Tab in ASDM

limlayhin — Mon, 01 Apr 2019 08:25:29 GMT

I am thinking to run "sw-module module sfr recover".
Is it mandatory for me to run "system install pkg_file" after running the recover command?