Cisco Cisco ASA 5512-X Adaptive Security Appliance - No Payload Encryption Troubleshooting Guide
Check the IPS SSM management interface is
up/down
, and check its configured IP address, subnet mask
and default gateway. This is the interface to access the Cisco Adaptive Security Device Manager (ASDM)
Software from the local machine. Try to ping the management interface IP address of IPS SSM from the local
machine that you want to access the ASDM. If unable to ping check the ACLs on the sensor.
Software from the local machine. Try to ping the management interface IP address of IPS SSM from the local
machine that you want to access the ASDM. If unable to ping check the ACLs on the sensor.
Problem:
The
cannot communicate with main app
error message appears while you attempt to connect to
the AIP SSM module.
Solution:
Reload the ASA or the AIP SSM module in order to resolve this error.
Unable to Upgrade/Update the IPS SSM
Problem:
The
Error: execUpgradeSoftware Connection failed
error message is seen on the CLI.
Solution:
Check that the IPS SSM management interface is
up/down
and that it is the interface through which the
ASA−IPS attempts to contact in order to download the software. This is not a backplane connection between
the ASA and IPS−SSM; it is the Ethernet connection on the AIP−SSM module itself, which needs to be
connected to a switch port and configured with a IP address, subnet mask and default gateway. If http still
does not work, try to use the FTP or SCP option with the upgrade command.
the ASA and IPS−SSM; it is the Ethernet connection on the AIP−SSM module itself, which needs to be
connected to a switch port and configured with a IP address, subnet mask and default gateway. If http still
does not work, try to use the FTP or SCP option with the upgrade command.
Upgrade Error : execUpgradeSoftware
Problem:
The
Error: execUpgradeSoftware The update requires 60340 KB in
/usr/cids/idsRoot/var/updates, there are only 57253 KB available.
error
message is seen during upgrade.
Solution 1:
In order to fix this issue, you need to log into the CLI of the sensor with a service account. If you do not have
a service account, you can create one with these commands:
a service account, you can create one with these commands:
configure terminal
user (username) priv service password (pass)
exit
Once you log into the service account, issue these rm /usr/cids/idsRoot/var/*pmz commands and log out of
the service account. Then check that the upgrade completes.
the service account. Then check that the upgrade completes.
Solution 2:
This error occurs because of the less space available on the IPS module since the recovery files occupy more
space on Module. Complete these steps in order to remove recovery files and resolve this error:
space on Module. Complete these steps in order to remove recovery files and resolve this error:
bash−2.05b# cd /usr/cids/idsRoot/var/updates/