Importing device to PIX MC

[reinke]

I want to import an existing device (PIX 515) into pix mc. None of my efforts are successful.

- PIX MC access the pix via https

- authentication is o.k. (syslog message)

- show version command is executed (syslog message

- a SSL transmission from pix to pix mc starts (ethereal)

- pix terminates ssl session with FIN ACK

- pix mc sends RST

... and at the end the import is completed with errors: Cannot connect to server ... check username and password ...

PIX OS is 6.3 and I am using latest version of pix mc.

Any idea?

Thanks in advance

Edgar

[umedryk]

Probably you should update IDSM or VMS or both from :

IDSM : http://cco/cgi-bin/tablebuild.pl/ids3-cat6500-idsm

VMS : http://cco/cgi-bin/tablebuild.pl/mgmt-ctr-ids

[rbmcnutt]

There was an issue (see CSCeb30468) where the HTTPS server returned one byte of data at a time under some circumstances. In versions prior to 1.2, Firewall MC did not properly process this single byte stream. This issue is fixed in Firewall MC 1.2 and later.

[g.rodegari]

Hi,

I've exactly the same problem... with:

- PIX-OS 6.3.3

- PIX-MC 1.2.2 for Solaris

have you got any news?

thanks a lot,

Graziano

[reinke]

No, I have not got any useful answer. I am using PIX MC 1.2.2 as well.

@gar

[g.rodegari]

Hi,

is it working?

thanks

[reinke]

no, it isn´t.

[g.rodegari]

Hi Edgard,

I can't try till next week, but... I think to have found a good point:

http://www.cisco.com/en/US/partner/products/sw/cscowork/ps2330/products_quick_start_chapter09186a00800e6d25.html#309880

what do you think about this?

regars,

Graz.

[smeek]

I am having the same issue and tried it through the process outlined in your link. Exact same error, request times out.

Steve

[g.rodegari]

Good news,

I've found this information, in the PIX-MC 1.2.2 release-notes:

Troubleshooting

The following topics supplement the troubleshooting information found in Using Management Center for Firewalls 1.2.

Why does the error message "Failed to contact the device" appear when I try to import from a device?

Solaris patch 112438-01 is required for Firewall MC 1.2.2 to communicate with the device. After installing this patch, you must reboot the Solaris server.

I'll try it as soon as possible !

Bye,

Graziano

[g.rodegari]

OK! with this patch works well!

hop helps all.

by Graz.