09-25-2018 07:03 PM - edited 03-12-2019 06:59 AM
I would like to ask why sfr is unresponsive?
FIT-ASA# show module sfr details
Getting details from the Service Module, please wait...
Unable to read details from module sfr
Card Type: Unknown
Model: N/A
Hardware version: N/A
Serial Number: JAD202200G1
Firmware version: N/A
Software version:
MAC Address Range: 0062.ec8f.92f0 to 0062.ec8f.92f0
Data Plane Status: Not Applicable
Console session: Ready
Status: Unresponsive
FIT-ASA# show module
Mod Card Type Model Serial No.
---- -------------------------------------------- ------------------ -----------
1 ASA 5516-X with FirePOWER services, 8GE, AC, ASA5516 JAD202200G1
sfr Unknown N/A JAD202200G1
Mod MAC Address Range Hw Version Fw Version Sw Version
---- --------------------------------- ------------ ------------ ---------------
1 0062.ec8f.92f1 to 0062.ec8f.92f9 1.1 1.1.12 9.9(2)
sfr 0062.ec8f.92f0 to 0062.ec8f.92f0 N/A N/A
Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------
Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
1 Up Sys Not Applicable
sfr Unresponsive Not Applicable
Thank you in advance.
09-25-2018 07:44 PM
09-26-2018 06:26 PM
09-25-2018 09:02 PM
It's most likely not installed.
Has it ever worked?
09-26-2018 06:27 PM
09-27-2018 12:50 AM
It appears to have gotten severely corrupted to the extent of not starting correctly. You may need to re-install the software module.
Unless it has a lot of locally-configured (via ASDM) settings, I'd just go ahead and re-image it and re-register to FMC and redeploy the policies.
09-27-2018 05:50 PM
08-29-2019 10:32 PM
08-29-2019 11:04 PM
Yes, that's correct. Recover and boot.
You might also precede those with an uninstall for the most complete treatment.
08-30-2019 12:56 AM
08-30-2019 04:59 AM
"fail-open" means if the sfr module fails (i.e. status is "down/down" or even "up/down") the ASA will ignore the service-policy that would otherwise redirect the traffic to it for inspection.
Once the module status is "up/up" traffic redirection will resume.
08-30-2019 09:47 AM
08-30-2019 07:22 PM
It could be that the sfr module is not installed and that there is either no installed module or one of the legacy types (cxsc or ips).
"show module" will return the overall status of all module types.
10-21-2020 02:00 PM
Had a similar issue that was resolved with just a reset.
sw-module module sfr shutdown
sw-module module sfr reset
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide