WSA / ERROR MESSAGES

[spacemeb]

Hello,

Lately we are receiving those kind of messages, do you have any idea what we should do? 

Info below:

Product: Cisco S690 Web Security Appliance

Model: S690

Version: 12.5.1-043 

Application fault?

An application fault occurred: ('python2.6_10_amd64_nothr/base64.py b64decode|76', "<type 'exceptions.TypeError'>", 'Incorrect padding', '[egg/ldap_client.py setup_connection_thread|2440] [_coro.pyx coro._coro.sched.with_timeout (coro/_coro.c:11765)|1099] [egg/ldap_client.py setup_connection|2522] [egg/ldap_client.py authenticate_connection|2621] [egg/config_util.py decrypt|55] [python2.6_10_amd64_nothr/base64.py b64decode|76]')

Last message occurred 11 times between Mon Sep  6 16:53:12 2021 and Mon Sep  6 16:53:22 2021.

Another weird message:

<autosupport model="M390" hostname="sma1" date="06 Sep 2021 00:01:27 +0300">

  <hardware serial="70E" ram="4" BIOS="C220M4.2.0.4a.0.STBU1" RAID="24.7.0-0047" />

  <software version="13.8.1" build="068" build_date="2021-03-10" />

  <uptime secs="12987872">150d 7h 44m 32s</uptime>

    <status build="13.8.1-068" hostname="sma1" timestamp="20210906000121">

    <birth_time timestamp="20210408162051 (150d 7h 40m 30s)"/>

    <last_counter_reset timestamp=""/>

    <system status="online" />

    <oldest_message secs="0" mid="0" />

    <features>

      <feature name="Cisco IronPort Spam Quarantine" time_remaining="2592000" />

      <feature name="Cisco Centralized Web Reporting" time_remaining="72624229" />

      <feature name="Cisco Centralized Email Reporting" time_remaining="2592000" />

      <feature name="Incoming Mail Handling" time_remaining="Dormant/Perpetual" />

      <feature name="Cisco Centralized Web Configuration Manager" time_remaining="72624229" />

      <feature name="Cisco IronPort Centralized Email Message Tracking" time_remaining="2592000" />

    </features>

    <counters>

      <counter name="inj_msgs"

          reset="0"

          uptime="0"

          lifetime="0" />

      <counter name="inj_recips"

          reset="0"

          uptime="0"

          lifetime="0" />

      <counter name="gen_bounce_recips"

          reset="0"

          uptime="0"

          lifetime="0" />

      <counter name="rejected_recips"

          reset="0"

          uptime="0"

          lifetime="0" />

      <counter name="dropped_msgs"

          reset="0"

          uptime="0"

          lifetime="0" />

      <counter name="soft_bounced_evts"

          reset="0"

          uptime="0"

          lifetime="0" />

      <counter name="completed_recips"

          reset="0"

          uptime="0"

          lifetime="0" />

      <counter name="hard_bounced_recips"

          reset="0"

          uptime="0"

          lifetime="0" />

      <counter name="dns_hard_bounced_recips"

          reset="0"

          uptime="0"

          lifetime="0" />

      <counter name="5xx_hard_bounced_recips"

          reset="0"

          uptime="0"

          lifetime="0" />

      <counter name="filter_hard_bounced_recips"

          reset="0"

          uptime="0"

          lifetime="0" />

      <counter name="expired_hard_bounced_recips"

          reset="0"

          uptime="0"

          lifetime="0" />

      <counter name="other_hard_bounced_recips"

          reset="0"

          uptime="0"

          lifetime="0" />

      <counter name="delivered_recips"

          reset="0"

          uptime="0"

          lifetime="0" />

      <counter name="deleted_recips"

          reset="0"

          uptime="0"

          lifetime="0" />

      <counter name="global_unsub_hits"

          reset="0"

          uptime="0"

          lifetime="0" />

    </counters>

    <current_ids

      message_id="1"

      injection_conn_id="0"

      delivery_conn_id="3" />

    <rates>

      <rate name="inj_msgs"

        last_1_min="0"

        last_5_min="0"

        last_15_min="0" />

      <rate name="inj_recips"

        last_1_min="0"

        last_5_min="0"

        last_15_min="0" />

      <rate name="soft_bounced_evts"

        last_1_min="0"

        last_5_min="0"

        last_15_min="0" />

      <rate name="completed_recips"

        last_1_min="0"

        last_5_min="0"

        last_15_min="0" />

      <rate name="hard_bounced_recips"

        last_1_min="0"

        last_5_min="0"

        last_15_min="0" />

      <rate name="delivered_recips"

        last_1_min="0"

        last_5_min="0"

        last_15_min="0" />

    </rates>

    <gauges>

      <gauge name="ram_utilization" current="0" />

      <gauge name="total_utilization" current="2" />

      <gauge name="cpu_utilization" current="0" />

      <gauge name="av_utilization" current="0" />

      <gauge name="case_utilization" current="0" />

      <gauge name="bm_utilization" current="0" />

      <gauge name="disk_utilization" current="0" />

      <gauge name="resource_conservation" current="0" />

      <gauge name="log_used" current="0" />

      <gauge name="log_available" current="1T" />

      <gauge name="conn_in" current="0" />

      <gauge name="conn_out" current="0" />

      <gauge name="active_recips" current="0" />

      <gauge name="unattempted_recips" current="0" />

      <gauge name="attempted_recips" current="0" />

      <gauge name="msgs_in_work_queue" current="0" />

      <gauge name="dests_in_memory" current="3" />

      <gauge name="kbytes_used" current="0" />

      <gauge name="kbytes_free" current="18874368" />

      <gauge name="msgs_in_policy_virus_outbreak_quarantine" current="0" />

      <gauge name="kbytes_in_policy_virus_outbreak_quarantine" current="0" />

      <gauge name="log_used" current="0" />

      <gauge name="reporting_utilization" current="0" />

      <gauge name="quarantine_utilization" current="2" />

    </gauges>

  </status>

  <third_party_status build="13.8.1-068" hostname="sma1" timestamp="20210906000127">

    <antispam>

    </antispam>

    <antivirus>

    </antivirus>

  </third_party_status>

</autosupport>

Any help is highly appreciated

[balaji.bandi · Accepted solution]

Looks for me Bug - you need to upgrade to 13.X version to fix the issue (12.5.1-043 )

First step is i reboot the SMA and see if that fix the issue, if not i will upgrade to 13.X  or 14.X  depends on your WSA code running.

If the WSA 690 ( you can not upgrade to 14.X  then check the compatable matrix of WSA and SMA) - read the relase notes of 13.X (they do support 12.X WSA code)

[Ken Stieers · Accepted solution]

The first one is a bug.
The second one is a feature.
In System Administration/Alerts, emails that get System info alerts get the Autosupport emails.

[Eric23]

Hello,

Does anyone know the bud id?

Thank you,

[amojarra]

Hi @Eric23 

Not Always Applications Faults are a bug or defects.

from the logs which you sent, I can match CSCwa78205 : Bug Search Tool (cisco.com) 

But you need to open a TAC case, so we can inspect from Backend and see what exactly is the issue.

Kindly check your Active Directory logs as well, to make sure they were not Down, or the connectivity between WSA and Active Directory . 

Regards,

Amirhossein Mojarrad

+++++++++++++++++++++++++++++++++++++++++++++++++++

++++   If you find this answer helpful, please rate it as such  ++++

+++++++++++++++++++++++++++++++++++++++++++++++++++

[Eric23]

Hi @amojarra 

Thank you for your reply !!