ASA reports error: "internal error in es_PostEvent: event argument tag is unknown"

Unanswered Question
Feb 10th, 2010

Hi gurus!

Can anyone please shed me some light on this error our client receives on their production ASA5510 firewall?

The syslog error ID is 216001 and it says exactly what I wrote in the title: internal error in es_PostEvent: event argument tag is unknown. There are lots of this errors and they overload the syslog. I can of course stop them sent to syslog but I really would like to know the reason.


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Kureli Sankar Wed, 02/10/2010 - 18:17

Here is the link for that syslog message:


ASA Syslog:
%ASA-3-216001: internal error in es_PostEvent: invalid descriptor


This bug should only affect ASAs that are configured for VPN. This instance of the 216001 syslog indicates a software error when generating a ISAKMP syslog or debug.  The logger is looking up the text for an event and no text is defined.


None. This bug only cosmetic and does not affect performance.

you can go to the above link login with your CCO ID and then key in this defect ID CSCsh88405

and find out the code it is resolved in.


zheka_pefti Wed, 02/10/2010 - 18:36

Thanks, pal.

The ASA indeed runs version 7.x and it terminates a lot of tunnels.

Will this error go away if it is upgraded to 8.x code ?


Kureli Sankar Wed, 02/10/2010 - 18:53

If you run a code where this cosmetic bug is fixed yes, you won't see this message anymore.



This Discussion