Botnet filter crashes ASA5505

[uber_cookie]

Hi,

I have a problem with my ASA5505 after enabling botnet filter my ASA reboots.

Also while booting it usualy takes around 30minutes of random cycles before loading the OS. It seems to be falling at the license check.

To fix the boot I usualy unplug the ASA for about 15minutes and then it will boot up fine.

Any ideas of what may cause this issue, or how to fix/troubleshoot it?

Thank you,

Cookie

[Giorgio Romano]

hi,

what version of FWOS is running on your ASA appliance?

regards

  giorgio

[sean_evershed]

Do you have the Botnet license installed?

It also states that you need a minium of 8.2 installed.

See below a useful guide:

https://supportforums.cisco.com/docs/DOC-8782

[uber_cookie]

Current version below, I have tried them all 8.2 and 8.3 the minute I enable botnet it crashes after 30-1hour, this firewall was rebooted 1 day again, it was stable for 98days with botnet disabled so it cannot be hardware.

Result of the command: "sh version"

Cisco Adaptive Security Appliance Software Version 8.4(1)

Device Manager Version 6.4(1)

Hardware:   ASA5505, 512 MB RAM, CPU Geode 500 MHz

Internal ATA Compact Flash, 128MB

BIOS Flash M50FW016 @ 0xfff00000, 2048KB

Encryption hardware device : Cisco ASA-5505 on-board accelerator (revision 0x0)

                             Boot microcode        : CN1000-MC-BOOT-2.00

                             SSL/IKE microcode     : CNLite-MC-SSLm-PLUS-2.03

                             IPSec microcode       : CNlite-MC-IPSECm-MAIN-2.06

                             Number of accelerators: 1

Licensed features for this platform:

Maximum Physical Interfaces       : 8              perpetual

VLANs                             : 20             DMZ Unrestricted

Dual ISPs                         : Enabled        perpetual

VLAN Trunk Ports                  : 8              perpetual

Inside Hosts                      : Unlimited      perpetual

Failover                          : Active/Standby perpetual

VPN-DES                           : Enabled        perpetual

VPN-3DES-AES                      : Enabled        perpetual

AnyConnect Premium Peers          : 2              perpetual

AnyConnect Essentials             : Disabled       perpetual

Other VPN Peers                   : 25             perpetual

Total VPN Peers                   : 25             perpetual

Shared License                    : Disabled       perpetual

AnyConnect for Mobile             : Disabled       perpetual

AnyConnect for Cisco VPN Phone    : Disabled       perpetual

Advanced Endpoint Assessment      : Disabled       perpetual

UC Phone Proxy Sessions           : 2              perpetual

Total UC Proxy Sessions           : 2              perpetual

Botnet Traffic Filter             : Enabled        240 days

Intercompany Media Engine         : Disabled       perpetual