Software ASA CX Installation propblem

[sqambera]

Hello,

I have two ASA firewalls configured in failover. I was trying to install software CX module on both. However, on secondary ASA its giving problem and not showing up in the "show module cx detail". I am attaching the output of same command on both ASA. If anyone can please help to resolve it.

Btw, I also did reimaging which didn't help either. Is there a way to proble whether the image downloaded on the ASA doesn't contain any error. Thanks.

[Marvin Rhoads]

I've not seen that particular discrepancy (card type and model not displaying) before.

What does a simple "show module" show on the secondary ASA?

Can you log into the PRSM GUI on the secondary unit?

[sqambera]

Hi Marvin,

Yes I can log into PRSM GUI. Here is the output of "show module":

Mod  Card Type                                    Model              Serial No.

---- -------------------------------------------- ------------------ -----------

   0 ASA 5525-X with SW, 8 GE Data, 1 GE Mgmt, AC ASA5525            FCH1710J2NL

ips Unknown                                      N/A                FCH1710J2NL

cxsc Unknown                                      N/A                FCH1710J2NL

Mod  MAC Address Range                 Hw Version   Fw Version   Sw Version

---- --------------------------------- ------------ ------------ ---------------

   0 4c4e.35ea.daef to 4c4e.35ea.daf8  1.0          2.1(9)8      9.1(3)

ips 4c4e.35ea.daed to 4c4e.35ea.daed  N/A          N/A

cxsc 4c4e.35ea.daed to 4c4e.35ea.daed  N/A          N/A          9.2.1.1

Mod  SSM Application Name           Status           SSM Application Version

---- ------------------------------ ---------------- --------------------------

ips Unknown                        No Image Present Not Applicable

cxsc ASA CX                         Up               9.2.1.1

Mod  Status             Data Plane Status     Compatibility

---- ------------------ --------------------- -------------

   0 Up Sys             Not Applicable

ips Unresponsive       Not Applicable

cxsc Up                 Up

Mod  License Name   License Status  Time Remaining

---- -------------- --------------- ---------------

ips IPS Module     Disabled        perpetual

[Marvin Rhoads]

That certainly does look odd and is even more perplexing since you can log into on-box PRSM on the secondary unit. Other than the cosmetic error, what are the signs that it is functionally not working?

It may be time to punt this one to the TAC.

[sqambera]

When I am trying to add ASA under "Add Device" in my PRSM server, its giving the error "CX Module not present for standby ASA". The error is coming up in the first step of adding device "Connect to ASA" while I try to add either my primary or secondary ASA

[jumora]

Sincerely open a TAC case, I have only seen one case like this and it is not even resolved.