07-09-2012 08:03 AM - edited 03-11-2019 04:28 PM
Hi,
Although my CSC-SSM module is down, I am stille getting the following error:
%ASA-3-421001: TCP|UDP flow from interface_name:IP_address/port to
interface_name:IP_address/port is dropped because application has failed.
A packet was dropped because the CSC SSM application failed. By default, this message is rate limited to 1 message every 10 seconds.
The module details are:
Mod Card Type Model Serial No.
--- -------------------------------------------- ------------------ -----------
1 ASA 5500 Series Content Security Services Mo ASA-SSM-CSC-10-K9 JAF13000FJK
Mod MAC Address Range Hw Version Fw Version Sw Version
--- --------------------------------- ------------ ------------ ---------------
1 0023.ebc4.1cc9 to 0023.aaaa.bbbb 1.0 1.0(11)5
Mod SSM Application Name Status SSM Application Version
--- ------------------------------ ---------------- --------------------------
Mod Status Data Plane Status Compatibility
--- ------------------ --------------------- -------------
1 Down Not Applicable
Please advice.
Thank you,
Christos.
07-10-2012 04:06 PM
Hi Chris,
What is the action Defind in policy MAP for CSC?
hostname(config−pmap−c)#csc {fail−close | fail−open}
Regards,
Dinkar
07-11-2012 02:00 AM
Hi Dinkar,
Thank you for your reply.
The csc is allowed the traffic if failed (#csc fail-open).
Best Regards,
Chris.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide