cisco asa ips module

teymur azimov · ‎10-21-2013

Hi dears

we buy 2 cisco ASA 5555-x with IPS module. when i write show module in each ASA.

ASA1:

Mod Card Type Model Serial No.

--- -------------------------------------------- ------------------ -----------

0 ASA 5555-X with SW, 8 GE Data, 1 GE Mgmt ASA5555 FCH1727J1VD

ips ASA 5555-X IPS Security Services Processor ASA5555-IPS FCH1727J1VD

Mod MAC Address Range Hw Version Fw Version Sw Version

--- --------------------------------- ------------ ------------ ---------------

0 7c69.f68f.6bdc to 7c69.f68f.6be5 1.0 2.1(9)8 8.6(1)2

ips 7c69.f68f.6bda to 7c69.f68f.6bda N/A N/A 7.1(4)E4

Mod SSM Application Name Status SSM Application Version

--- ------------------------------ ---------------- --------------------------

ips IPS Up 7.1(4)E4

Mod Status Data Plane Status Compatibility

--- ------------------ --------------------- -------------

0 Up Sys Not Applicable

ips Up Up

Mod License Name License Status Time Remaining

--- -------------- --------------- ---------------

ips IPS Module Enabled perpetual

ASA2:

ciscoasa# show module

Mod Card Type Model Serial No.

---- -------------------------------------------- ------------------ -----------

0 ASA 5555-X with SW, 8 GE Data, 1 GE Mgmt ASA5555 FCH1729J7Z5

ips Unknown N/A FCH1729J7Z5

cxsc Unknown N/A FCH1729J7Z5

Mod MAC Address Range Hw Version Fw Version Sw Version

---- --------------------------------- ------------ ------------ ---------------

0 c08c.6015.26c2 to c08c.6015.26cb 1.0 2.1(9)8 9.1(1)

ips c08c.6015.26c0 to c08c.6015.26c0 N/A N/A

cxsc c08c.6015.26c0 to c08c.6015.26c0 N/A N/A

Mod SSM Application Name Status SSM Application Version

---- ------------------------------ ---------------- --------------------------

ips Unknown No Image Present Not Applicable

Mod Status Data Plane Status Compatibility

---- ------------------ --------------------- -------------

0 Up Sys Not Applicable

ips Unresponsive Not Applicable

cxsc Unresponsive Not Applicable

Mod License Name License Status Time Remaining

---- -------------- --------------- ---------------

ips IPS Module Disabled perpetual

what is a problem in second ASA IPS? is this physical problem on IPS?

Thanks.

Marvin Rhoads · ‎11-05-2013

Double check your order. If the second unit was indeed purchased with IPS, it has a hardware problem and you should contact the TAC for an RMA.

It appears to have the SSD for CX module but is not imaged to support that.

Mark Graham · ‎11-07-2013

Marvin, could it also be that the liscence for the second 5555 is not setup for IPS? i see the License is set as "Disabled" which leads me to believe that it may not have a proper key.

Marvin Rhoads · ‎11-10-2013

I'm not positive but I think the license status "disabled" is s secondary effect. The card type "unknown" would be more troubling to me.

I'd open a TAC case on it if you've verified the order included IPS.