cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
476
Views
0
Helpful
3
Replies

Cisco ASA cli notification %ASA-3-340001: Vnet-proxy handshake error..

IamSamSaul
Beginner
Beginner

Hello,

 

I'm getting the following messages on cli of my Cisco ASA. I have tried to search on this message but could not find anything which can guide me to correct reason.

 

Jun 17 2022 14:34:15: %ASA-3-340001: Vnet-proxy handshake error 009 - request: tcp conn (0x00007fbf94011b30)
Jun 17 2022 14:34:54: %ASA-3-340001: Vnet-proxy handshake error 009 - request: tcp conn (0x00007fbf94006b20)
Jun 17 2022 14:35:37: %ASA-3-340001: Vnet-proxy handshake error 009 - request: tcp conn (0x00007fbf9000e490)
Jun 17 2022 14:36:19: %ASA-3-340001: Vnet-proxy handshake error 009 - request: tcp conn (0x00007fbf900146a0)
Jun 17 2022 14:36:51: %ASA-3-340001: Vnet-proxy handshake error 009 - request: tcp conn (0x00007fbf7cd9f110)
Jun 17 2022 14:37:25: %ASA-3-340001: Vnet-proxy handshake error 009 - request: tcp conn (0x00007fbf7caaa730)
Jun 17 2022 14:38:01: %ASA-3-340001: Vnet-proxy handshake error 009 - request: tcp conn (0x00007fbf8c006060)

 

The Cisco ASA can connect to Cisco Smart Licensing portal and licensed properly. I read somewhere that this might happen if Cisco ASA can't reach the Cisco Smart Licensing cloud.

 

I hope someone can point me to the right direction.

 

Thanks & Regards,

 

Sam

3 Replies 3

Rob Ingram
VIP Expert VIP Expert
VIP Expert

@IamSamSaul have you seen this link for troubleshooting smart licensing issues? https://www.cisco.com/c/en/us/support/docs/security/adaptive-security-appliance-asa-software/213932-asa-smart-licensing-failures-due-to-cert.html

 

Confirm which ASA version you are running also.

 

Possibly a certificate issue, refer to the guide and check your certificates. Refer to this link https://www.cisco.com/c/en/us/support/docs/field-notices/703/fn70319.html the QuoVadis Root CA certificatge may need updating on the ASA.

 

IamSamSaul
Beginner
Beginner

Hi Rob,

 

Thanks for your reply. I had already found the first URL and followed the steps. My Cisco ASA version is:

 

Cisco Adaptive Security Appliance Software Version 9.17(1)

 

As you see below, the device has successfully registered to Cisco Smart Licensing cloud.

Smart Licensing is ENABLED

Utility:
Status: DISABLED

Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED

Transport:
Type: Callhome

Registration:
Status: REGISTERED
Smart Account: ############
Virtual Account: DEFAULT
Export-Controlled Functionality: ALLOWED
Initial Registration: SUCCEEDED on Mar 04 2022 10:18:11 UTC
Last Renewal Attempt: None
Next Renewal Attempt: Aug 31 2022 10:18:09 UTC
Registration Expires: Mar 04 2023 10:13:06 UTC

License Authorization:
Status: AUTHORIZED on Jun 17 2022 12:58:29 UTC
Last Communication Attempt: SUCCEEDED on Jun 17 2022 12:58:29 UTC
Next Communication Attempt: Jul 17 2022 12:58:28 UTC
Communication Deadline: Sep 15 2022 12:53:13 UTC

 

Thanks & Regard,

Sam

MHM Cisco World
Advisor
Advisor

Vnet-proxy from Azura are you config any Web filter ? I don't have a lot info. about the Azura but start from their.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: