Re: If ne has a sfr (FirePOWER)

Gus Rosa · ‎05-19-2017

trying to add a new 5525 for HA but when I issue the failover command in the secondary I get

Mate detected then I get this error

HA failure due to Mate not present card in slot 3 is different from mine sfr5525

i noticed I had firepower 5.4 on the new 5525 but in the existing one I had no software installed on it. I removed the software on the new 5525 in hopes thus would work but it did not. I did not issue a reload or reboot though. Could this be the problem?

Marvin Rhoads · ‎05-19-2017

If ne has a sfr (FirePOWER) module then the other must as well for HA to form successfully.

If your ASA software is 9.3(1) or later, you can overide that setting with the command:

no monitor-interface service-module

Reference:

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-firewalls/200944-Disable-Service-Module-Monitoring-on-ASA.html

Gus Rosa · ‎05-19-2017

Thank you for your reply. I'll give that command a go to see if HA comes up and I'll make sure that software matches for sfr on both FWs even though they are not in use.

fernando.quiroga · ‎08-13-2018

I have a similar problem, and the way to reach to a solution was with this comands:

sw-modulo module cxsc uninstall

sw-module module sfr uninstall

regards

mbilgrav · ‎01-21-2019

For the record, I had the error:

Detected an Active mate
Mate CXSC5525 card in slot 3 is different from mine SFR5525

I issued:

no monitor-interface service-module

sw-module module sfr uninstall

But didnt work untill AFTER a reboot !

ROBERT T · ‎01-31-2019

This worked for me after a reboot.