cisco asa ips module

[teymur azimov]

Hi dears

we buy 2 cisco ASA 5555-x with IPS module. when i write show module in each ASA.

ASA1:

Mod Card Type                                    Model              Serial No.

--- -------------------------------------------- ------------------ -----------

  0 ASA 5555-X with SW, 8 GE Data, 1 GE Mgmt     ASA5555            FCH1727J1VD

ips ASA 5555-X IPS Security Services Processor   ASA5555-IPS        FCH1727J1VD

Mod MAC Address Range                 Hw Version   Fw Version   Sw Version

--- --------------------------------- ------------ ------------ ---------------

  0 7c69.f68f.6bdc to 7c69.f68f.6be5  1.0          2.1(9)8      8.6(1)2

ips 7c69.f68f.6bda to 7c69.f68f.6bda  N/A          N/A          7.1(4)E4

Mod SSM Application Name           Status           SSM Application Version

--- ------------------------------ ---------------- --------------------------

ips IPS                            Up               7.1(4)E4

Mod Status             Data Plane Status     Compatibility

--- ------------------ --------------------- -------------

  0 Up Sys             Not Applicable

ips Up                 Up

Mod License Name   License Status  Time Remaining

--- -------------- --------------- ---------------

ips IPS Module     Enabled         perpetual

ASA2:

ciscoasa# show module

Mod  Card Type                                    Model              Serial No.

---- -------------------------------------------- ------------------ -----------

   0 ASA 5555-X with SW, 8 GE Data, 1 GE Mgmt     ASA5555            FCH1729J7Z5

ips Unknown                                      N/A                FCH1729J7Z5

cxsc Unknown                                      N/A                FCH1729J7Z5

Mod  MAC Address Range                 Hw Version   Fw Version   Sw Version

---- --------------------------------- ------------ ------------ ---------------

   0 c08c.6015.26c2 to c08c.6015.26cb  1.0          2.1(9)8      9.1(1)

ips c08c.6015.26c0 to c08c.6015.26c0  N/A          N/A

cxsc c08c.6015.26c0 to c08c.6015.26c0  N/A          N/A

Mod  SSM Application Name           Status           SSM Application Version

---- ------------------------------ ---------------- --------------------------

ips Unknown                        No Image Present Not Applicable

Mod  Status             Data Plane Status     Compatibility

---- ------------------ --------------------- -------------

   0 Up Sys             Not Applicable

ips Unresponsive       Not Applicable

cxsc Unresponsive       Not Applicable

Mod  License Name   License Status  Time Remaining

---- -------------- --------------- ---------------

ips IPS Module     Disabled        perpetual

what is a problem in second ASA IPS? is this physical problem on IPS?

Thanks.

[Marvin Rhoads]

Double check your order. If the second unit was indeed purchased with IPS, it has a hardware problem and you should contact the TAC for an RMA.

It appears to have the SSD for CX module but is not imaged to support that.

[Mark Graham]

Marvin, could it also be that the liscence for the second 5555 is not setup for IPS?  i see the License is set as "Disabled"  which leads me to believe that it may not have a proper key. 

[Marvin Rhoads]

I'm not positive but I think the license status "disabled" is s secondary effect. The card type "unknown" would be more troubling to me.

I'd open a TAC case on it if you've verified the order included IPS.