CSC-SSM-10 Failover Problem

[ngtransge]

I have problem with CSC failover, ASA failover work just fine, but CSC don't set up failover. When I configure CSC failover first on Primary device then on Secondary it comes with error (InterScan for CSC SSM could not establish a connection. The software, hardware, and patch version on the peer devices must match. Please reconcile the mismatch that was detected and try again.).

Below are show module 1 detail  of both devices.

Primary

**********

ASA 5500 Series Content Security Services Module-10

Model:              ASA-SSM-CSC-10

Hardware version:   1.0

Serial Number:   

Firmware version:   1.0(11)2

Software version:   CSC SSM 6.3.1172.4

MAC Address Range:

App. name:          CSC SSM

App. Status:        Up

App. Status Desc:   CSC SSM scan services are available

App. version:       6.3.1172.4

Data plane Status:  Up

Status:                  Up

HTTP Service:        Up                                                       

Mail Service:          Up                                                       

FTP  Service:         Up                                                       

Activated:              Yes                                                      

Mgmt IP addr:       192.168.1.3                                              

Mgmt web port:      8443                                                     

Peer IP addr:       <not enabled>  

Secondary

**********

ASA 5500 Series Content Security Services Module-10

Model:              ASA-SSM-CSC-10-K9

Hardware version:   1.0

Serial Number:   

Firmware version:   1.0(11)5

Software version:   CSC SSM 6.3.1172.4

MAC Address Range:

App. name:          CSC SSM

App. Status:        Up

App. Status Desc:   CSC SSM scan services are available

App. version:        6.3.1172.4

Data plane Status:  Up

Status:                  Up

HTTP Service:        Up                                                       

Mail Service:          Up                                                       

FTP  Service:         Up                                                       

Activated:              Yes                                                      

Mgmt IP addr:       192.168.1.194                                            

Mgmt web port:      8443                                                     

Peer IP addr:       <not enabled>

As you can see software version on both devices are same, different are only "Model" and "Firmware" can it be the problem ?

Thanks for your help.

[csaxena · Accepted solution]

Hi,

In terms of ASA module failover, both ASA units that have  AIP-SSM or CSC-SSM modules must be of the same hardware type. For  example, if the primary unit have the ASA-SSM-10 module, the secondary  unit must have the ASA-SSM-10 module.

What we see here is a hardware mismatch and that is the issue.

Here is a document for your reference :

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807dac5f.shtml#failgi

Hope this helps. Please reply if you need further assistance.

Regards,

Chirag

P.S.: Please mark this thread as answered if you feel your query is answered. Do.rate helpful posts.