cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
97
Views
5
Helpful
1
Replies
Highlighted
Beginner

CSCvp67392 - ASA/FTD HA Data Interface Heartbeat dropped due to Reverse Path Check - 5

Hi all,

we have been hit by this bug, too, when we tried to upgrade a HA pair of 5545-X from 9.8.3.18 to something unaffected by current CVEs. All the 9.8.4 releases yielded a machine where obviously the HTTP/DTLS server process had crashed

--> No ASDM, no WebVPN, no Anyconnect sessions. So we tried the 9.9.2 interim branch. 9.9.2.56 claims to have this bug fixed (along with the critical ones before, of course), but hey: You install the alleged 9.9.2.56  of 2019-08-08
(MD5 checksum: df895d1d67284c443bfa37a94e0bc911), and it comes up and claims to be a 9.9.2.50.

In don't know what it is, but the MD5 of the 9.9.2.50 image is definitely different again as is the 9.9.2.52 checksum.

And it IS affected by CSCvp67392. This is the second time within 3 months that you get a a wrongly labeled

ASA release (last one was some 9.3 release and fixes after a couple of days).

 

To ASA development team: Please at the very least get your versions consistent!

 

Thanks, Martin

1 REPLY 1
Beginner

Re: CSCvp67392 - ASA/FTD HA Data Interface Heartbeat dropped due to Reverse Path Check - 5

Follow-up: The 9.9.2.52 image seems to get the job done for us. Consistent version numbers, and no Reverse Path garbage.

Martin

CreatePlease to create content
Content for Community-Ad
July's Community Spotlight Awards