Hi Soufiane,   Yes the disk is defect, and you'll need to RMA the disk. Beware that the WAVE-294 is End-Of-Sale, but there is still HW support.   Link to EoS notice : https://www.cisco.com/c/en/us/products/collateral/routers/wide-area-application-services-waas-appliances/eos-eol-notice-c51-739730.html   You'll need to reinstall the WAAS software again, after the new disk is installed.   Best Regards Finn ... View more

Hi both,   The problem you're facing is that you have to use at least WAAS version 5.4.1 when you're dealing with an ISR-4351. The version you're trying is only supported (and installable) on ISR-4451.   Try to use 5.4.x or better 5.5.x something - that will do the trick for you.   Best Regards Finn ... View more

Hi again,   This lead to the suspicion that you actually is sending more than 1Gbit of traffic out the interface, since you do not have an traffic shaper anymore (assume you've removed the service policy).   Best Regards Finn     ... View more

Hi,   Try issuing this command : show platform qos queue stats gi 1/0/3    ==> this command reveals in which queue the packet are enqued/dropped   show platform qos dscp-cos counters gi 1/0/3  ==> this command reveal the DSCP values seen on ingress and egress packets OBS: please remember the space between "gi" and "1/0/3" !!   But back to your output : You're dropping packets in NCI-NET-MGMT-QUEUE   ... (total drops) 1294807    ... cs2, cs6, cs7 NCI-DATA-QUEUE            ... (total drops) 4293184    ... af21, af22, af23 the sum of these gives (Total output drops: 5587991) the same number (you're not always that lucky when looking at Cisco counters ;-) I wonder why you drop packets in the MGMT queue, but can see that you included Citrix VDI (TCP port 1494) and RAW printing (TCP port 9100) in the MGMT class (assume that you mark the packet ingress on other ports on the switch by the ...MARK policy), and these protocols can be a little BW hungry   But if you're sending from 1G ports towards a 100 Mbit shaped port, bursts will cause packet drops. Only way to remedy this, is to supply more buffers to this queue, but that must be taken from somewhere else.   Best Regards Finn ... View more

Hi,   Cisco WAAS heavily relies on byte caching in its DRE (Data-Redundancy-Elimination) functionality. Or to be more precise pattern caching or Chunk caching - check this link : https://www.networkworld.com/article/2268577/lan-wan/chapter-1--introduction-to-cisco-wide-area-application-services--waas-.html?page=4   Object caching is used for SMB and Akamai connect caching.   Best Regards Finn ... View more

Hi Roberto, What version of the ova file are you trying to install ? please post the output from : dir harddisk: dir If the wizard fails, it will normally try to clean up ... or if it haven't done anything yet, there is nothing to clean up. Have you installed/purchased the router with APPx ? Best Regards Finn ... View more

Hi Saimun, Please refer to this documentation : https://www.cisco.com/c/en/us/td/docs/app_ntwk_services/waas/vwaas/vwaas-641/vwaas-install-config/v-intro.html#76353 And refer to table 1-16 and/or 1-17 for supported hypervisors. Best Regards Finn ... View more

Hi,   You'll have to use a "dedicated" server for WAAS CM! Read "dedicated" as potentially a virtualized instance on an approved hypervisor (ESXi/Hyper-V/KVM/Azure), as you soon cannot buy a standalone WAAS appliance (WAVE is end-of-sale from March 31st 2018).   Best Regards Finn ... View more

Hi Rob,   TCP port 2598 is part of the Citrix optimization policy. Have you placed your policy in the top, to ensure that it's processed before any default optimization policies ? Otherwise you risk hitting the default Citrix policy before yours. Try issuing these commands in both ends : show class-map type waas Citrix show class-map type waas <your class-map> and monitor the flow matches !   Best Regards Finn ... View more

Hi Tammy,   For a short period of time (during the 3-way TCP handshake) these flows are counted as a TCP connection and therefore counted in the license.If the TCP session are determined to be placed in "pass-through"this one session is deducted from the count. The "current" usage can be determined by issuing "show stat tfo".   Sometime when a client is infected and tries to set up a lot of sessions (or port-scan like application) you can encounter overload situations on a WAAs devices, because the client spawns a lot of TCP sessions, which never gets established.   Best regards Finn ... View more

Hi, Primary power supply is probably defect, do a RMA of the PSU.   Best Regards Finn ... View more

Hi Stuart,   This is strange, I don't see why and I've found no Cisco doc stating this. What platforms and software version are you running on your routers and WAAS ? Maybe TAC can assist ? Last thing that popped my eye is that in some documentation when your running with names access-list you have to specify the "name" keyword. It's a long shot, but I'm out of suggestions.   Best Regards Finn ... View more

Hi Stuart,   I think you should use different route-map (and thus different) Access-lists on the WAN and LAN interfaces. PBR is always ingress only. On the LAN interface where the FTP server, you'll have to reverse the Access-list for catching ftp traffic originating (sourced) from the FTP server. So something like this (this is only relevant for the site where the FTP server resides on the LAN) ip access-list extended WAAS-LAN  permit tcp any any eq ftp  permit tcp any any eq ftp-data ip access-list extended WAAS-WAN  permit tcp any eq ftp any  permit tcp any eq ftp-data any   Also be aware that this won't work for passive FTP and also the direction have to be change for the remote site.   Best Regards Finn ... View more