ASA Reload

Similar Questions

• ASA - Anyconnect is not activated afer reload.

  Hello

  every time my ASA is reloaded anyconnect is not enabled.

  It must be manually enabled.

  I have asa 5510 with version 8.4.2.

  So you say that after you reload, you have a different configuration then before?

  You can make a file compare configs before and after the reboot and see which line is missing, if the case?

• CSCuj81593 - failover interface ASA tracking status unknown after active reload

  Hello

  We use the software Version 9.1 (4) on ASA 5545.

  When you switch to show, we get the following result:

  This host: primary: enabled

  Activity time: 10847 (s)

  slot 0: ASA5545 hw/sw rev (status 1.0/9.1(4)) (upward (Sys)

  Interface to the outside (83.236.222.116): unknown (pending)

  Interface inside (172.17.220.130): Normal (pending)

  Management interface (0.0.0.0): link down (not guarded)

  Another host: secondary - ready Standby

  Activity time: 448 (s)

  slot 0: ASA5545 hw/sw rev (status 1.0/9.1(4)) (upward (Sys)

  Interface (0.0.0.0) outdoors: unknown (pending)

  Interface (0.0.0.0) inside: unknown (pending)

  Management interface (0.0.0.0): link down (not guarded)

  The problem is that the interface tracking does not work.  If the ethernet on the inside (or outside) interface cable is removed, we do not get a failover.

  Can anyone make a suggestion please?

  Donald

  Hi Donald,.

  'Re missing you the "Standby" IPs on each interface.  This is necessary for the failover interface followed.  Once you assign day before IPs, the output of "show failover" display these files directly on the device in standby, and interfaces will be from 'pending' to 'Normal '.

  Sincerely,

  David.

• Updated AIP-SSM-10 on ASA 5510

  Hello

  I want to upgrade the IPS module in an ASA 5510, and I have a few questions. The AIP - SSM is running E3 479.0 1.0000 and I have a valid account of the ORC etc for this.

  1. What is the version of the software on the question of the ASA?
  2. When I look in the software downloads< ips="" there="" are="" .pkg="" and="" .img="" files.="" i="" want="" to="" upgrade="" to="" 6.3(3)e4.="" do="" i="" have="" to="" re-image="" the="" ips="">
  3. AFAIK redefinition to wipe the device so I just reload the config after, right?
  4. I guess I can apply any update after going to E4?
  5. Can you give me links for this upgrade?

  see you soon

  Let me give some clarification on a few points:

  2. There is no need to recreate the image on the device using the .img file.  You can improve the mechanism of maintenance of your existing configuration using the .pkg file.  It is the recommended method for upgrading to Cisco IPS devices/modules.  The .img file to recreate the image should only be used to restore the default device.

  5 here are links for the upgrade of the probe using a .pkg file.  For updates through the IDM user interface:

  http://www.Cisco.com/en/us/docs/security/IPS/6.2/configuration/guide/IDM/idm_sensor_management.html#wp2126670

  For upgrades via the CLI:

  http://www.Cisco.com/en/us/docs/security/IPS/6.2/configuration/guide/CLI/cli_system_images.html#wp1142504

  Another point of clarification; current releases of IPS software supported on the AIP-SSM-10 are (taking into account you are currently running 6.2 (1) E3):

  6.2 (3) E4

  7.0 (4) E4

  You can go directly to each output.

  Scott

• Detection of threats - Cisco ASA

  Afternoon,

  I'm trying to understand how the threat detection feature prevents attackers. From my understanding, taking into account the line configuration below, if a host had to send 45 SYN in 1 second, then it would be recorded as a threat and thus avoided the host - thus negating any other communication, whether it is legitimate or not.

  threat-detection rate syn-attack rate-interval 600 average-rate 30 burst-rate 45     

  Take this example to the review, I have a few questions.

  1. It's shun entry stored in some sort of table of shun?

  2. In what order the package is processed on arrival? He is compared to those existing avoids before it hits ACL, NAT and so on?

  3. This entry of shun there a time-out or duration of life, where, after a certain period of time the shun is revoked?

  4. Are disabled with a reload Shun or they persist until that of the means of manual compensation?

  5. Without taking into account all of the above - leaking just for the unique SYN that strikes the burst rate, or they apply to any other communication attempted to this port and address from the source?

  Thanks in advance for your help.

  Kind regards

  Luke

  
  Please rate helpful posts and mark correct answers.
  

  Hi Luke,.

  1 - Yes, there is a table of shun.

  Use the command show - shun threat detection to display a complete list of attackers who were rejected by detecting threats specifically. Use the show shuncommand to display a list of all IP addresses that are actively be shunned by the ASA (including from sources other than the detection of threats).

  2 years - Yes the package is first checked Shuns.

  years.3, 4 and 5 -:-answer is below

  Shun control allows you to block connections from a host of attacking. All future connections of the source IP address are fallen and recorded until the blocking feature is removed manually or by the Cisco IPS sensor. Blocking of the shun command is applied or not a connection to the specified host address is currently active.

  If you specify the destination address, source and destination ports and Protocol, then you drop the correspondent connection as well as placing a shun on all future connections to the IP address of source; all future connections are educated, not just those that match these specific connection parameters.

  You can have an order by source IP address of shun.

  Because the shun command is used to block attacks in a dynamic way, it is not displayed in the configuration of the SAA.

  Whenever a configuration of the interface is removed, all fled attached to this interface are also deleted. If you add a new interface or replace the same interface (using the same name), and then you must add this interface to the IPS sensor if you want the IPS sensor to monitor this interface.

  Dubey, Shivam

• ASA Rommon boot guard!

  Hello

  I recently had to re - format, add a new activation key and add the asdm504.bin and the asa704 - k8.bin in my ASA 5520 (I accidentally erased memory on the machine). Now, whenever I use the command "reload" it just directly load in Rommon #... when I get to the Rommon prompt # all what I have to do is type currently... 'start-up' and it loads my file asa704 - k8.bin and load to the top of my config and good mine. I just wonder, is it possible that I would be able to put it easily so it loads the image automatically?

  asa2 (config) #show boot

  Variable BOOT = disk0: / asa704 - k8.bin

  Current BOOT variable = disk0: / asa704 - k8.bin

  Variable CONFIG_FILE = disk0: / startup-config

  Current CONFIG_FILE variable = disk0: / startup-config

  asa2 (config) # disk0 see the:

  The boot disk0: caching, please wait... Fact.

  -# - length - time - path

  8 2995 June 7, 2006 06:30:02 startup-config

  9 5437440 June 7, 2006 06:18:04 asa704 - k8.bin

  10 5958324 June 7, 2006 06:24:08 asdm504.bin

  51515392 bytes available (11431936 bytes used)

  Thank you

  Chris

  Hi Chris,

  0 x 00112002-> which means start the TFTP server, runs aground, go to rommon.

  The ' config-register 0 x 1 ' is ok, that it will ask the ASA to load from default image.»

  As precaution (ditto for me), pls save the config (evem but will not delete the config file).

  Rgds,

  AK

• Installation of firepower on redundant ASA 5512 x pair

  Hi, I am trying to install the firepower on pair redundant asa5512x that is configured in active / standby. These asas have an IPS module installed. I need to remove the old IPS module and install the module of firepower.

  I know I need to stop existing ips module, uninstall it, then load the image to start fire etc... However, I have no experience working with redundant units so I don't know how to install firepower in a configuration of active / standby.

  I tried instructions guides on how to do this upgrade of ips in a redundant pair of asa, but the only guides I've found so far speak upgrade firepower in unit asa autonomous.

  any suggestions, instructions or links to blog/sites that provide instructions step by step on the upgrade of firepower in active/standby mode would be much appreciated.

  Thanks in advance.

  I understand say you that uninstalling ips module cause failover? This should be ok because ASA 9.2.x and earlier the pair HA monitors the State of default service module and which cannot be disabled.

  9.3 ASA presented

  (no) monitor-interface service-module

  .. what allows to disable this behavior. Even on 9.2.x, however, you should be able to uninstall on the rescue unit. When you say that it didn't work, this error message do you have? Is about, I would say: 1. Uninstall secondary ips - standby. Primary-active should see module go down and score watch is not ready. 2. repeat on active primary. When the primary unit active reload, the secondary-sleep should see no assets to mate and the active role. You should now have this situation of active secondary and primary-secondary 3. Install sfr on primary-secondary. Load the boot image, perform the initial configuration module and load running image. 4. install sfr on secondary assets, including the loading and installation stages. When primary-secondary sees reloading secondary-active, it must assume the active State and be primary active. After charging high school-watch it requires correspondence module type (IE both have installed SFR). 5. Save and check the connection to the management center of FireSIGHT on two modules of sfr. 6. create and deploy strategies to the modules in the two ASAs. 7 change the service policy to redirect traffic to the module of sfr for inspection by the policies deployed on these modules, ASA.

• the ASA 5505 configuration

  Hey guys

  I have a server that accepts traffic on a port within my network and external clients need to access this server. the nat and accesslist works well, but it is a matter of wait time and connection failed... Note that without the client server asa directly works fine... and note also that the traffic is encrypted (ssl)... are there additional provisions that I have to configure? y is it expire? Packet Capture see traffic from the outside to reach inside the interface but no response from the inside to the outside...

  I don't have that only one access list reloads the traffic from the outside to the server and a nat rule.

  advice needed...

  Thank you

  Hello

  So from what I understand

  "inside the xxx.114 interface the default route on the server is xxx.1 which is one interface on another asa.

  This means that the default route on the server is an another ASA. It won't work unless you apply TCP statebypass.

  ASA is a statefull firewall. This means for the TCP IP, always see two way traffic. If SYN crosses an ASA should see SYN/ACK back. If an ASA did not syn and sees syn/ack due to asymmetric routing, is wrong in the wok.

  Change the default route in the same ASA server or configure TCP statebypass (which is not recommended however).

  Thank you

• Two modules ASA 6.0.0.1 blocking all traffic

  Hi all

  I have two sensors 5525-X blocks all traffic until what they have restarted. It happens once a day. Accordingly to the ASA don't miss them so that they do not trigger a failover event.

  Power of fire virtual versin 6.0.0.1 Management Center
  5525-X version 6.0.0.1 sensor

  In the paper, I found this:

  9 Mar 19:22:25 ActionQueueScrape.pl [27931 1 Swiss francs]: new IPReputation or files copied from nursery, necessary for the /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSync.pm 1760 line signal process.
  9 March 19:27:25 [27931 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  9 March 19:27:25 ActionQueueScrape.pl [27931 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 March 19:27:25 ActionQueueScrape.pl [27931 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  9 Mar 19:32:30 ActionQueueScrape.pl [27931 1 Swiss francs]: cannot read the answer:
  9 Mar 19:32:30 ActionQueueScrape.pl [27931 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 19:32:30 ActionQueueScrape.pl [27931 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  9 Mar 19:37:35 [27931 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  9 Mar 19:37:35 ActionQueueScrape.pl [27931 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 19:37:35 ActionQueueScrape.pl [27931 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  9 Mar 19:42:40 [27931 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  9 Mar 19:42:40 ActionQueueScrape.pl [27931 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 19:42:40 ActionQueueScrape.pl [27931 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  9 March 19:47:45 [27931 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  9 March 19:47:45 ActionQueueScrape.pl [27931 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 March 19:47:45 ActionQueueScrape.pl [27931 1 Swiss francs]: snort for reloading of data signaling IPReputation failed after two attempts to /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm line 1685.
  9 March 19:47:45 ActionQueueScrape.pl [27931 1 Swiss francs]: END of TASK. 40c87442-e62c-11e5-a856-90c5001d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 1520
  9 Mar 19:48:31 ActionQueueScrape.pl [29616 1 Swiss francs]: START of TASK. e6aed6e6-e62f-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 0
  9 Mar 19:48:33 ActionQueueScrape.pl [29616 1 Swiss francs]: update successfully pushed to UM 172.20.1.81 /usr/local/sf/lib/perl/5.10.1/SF/Synchronize/VerticalSync.pm line 396.
  9 Mar 19:48:33 ActionQueueScrape.pl [29616 1 Swiss francs]: END of TASK. e6aed6e6-e62f-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 2
  9 Mar 19:48:57 ActionQueueScrape.pl [29708 1 Swiss francs]: START of TASK. f5bf599e-e62f-11e5-b7db-17d7001d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 0
  9 Mar 19:48:57 ActionQueueScrape.pl [29708 1 Swiss francs]: new IPReputation or files copied from nursery, necessary for the /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSync.pm 1760 line signal process.
  9 Mar 19:53:57 [29708 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  9 Mar 19:53:57 ActionQueueScrape.pl [29708 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 19:53:57 ActionQueueScrape.pl [29708 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  9 Mar 19:59:02 [29708 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  9 Mar 19:59:02 ActionQueueScrape.pl [29708 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 19:59:02 ActionQueueScrape.pl [29708 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  9 Mar 20:04:07 [29708 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  9 Mar 20:04:07 ActionQueueScrape.pl [29708 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 20:04:07 ActionQueueScrape.pl [29708 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  9 Mar 20:09:12 [29708 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  9 Mar 20:09:12 ActionQueueScrape.pl [29708 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 20:09:12 ActionQueueScrape.pl [29708 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  9 Mar 20:14:17 [29708 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  9 Mar 20:14:17 ActionQueueScrape.pl [29708 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 20:14:17 ActionQueueScrape.pl [29708 1 Swiss francs]: snort for reloading of data signaling IPReputation failed after two attempts to /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm line 1685.
  9 Mar 20:14:17 ActionQueueScrape.pl [29708 1 Swiss francs]: END of TASK. f5bf599e-e62f-11e5-b7db-17d7001d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 1520
  9 Mar 20:14:34 ActionQueueScrape.pl [31432 1 Swiss francs]: START of TASK. 8a293d9a-E633-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 0
  9 Mar 20:14:36 ActionQueueScrape.pl [31432 1 Swiss francs]: update successfully pushed to UM 172.20.1.81 /usr/local/sf/lib/perl/5.10.1/SF/Synchronize/VerticalSync.pm line 396.
  9 Mar 20:14:36 ActionQueueScrape.pl [31432 1 Swiss francs]: END of TASK. 8a293d9a-E633-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 2
  9 Mar 20:15:15 ActionQueueScrape.pl [31540 1 Swiss francs]: START of TASK. a2812330-E633-11e5-955f-fcea001d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 0
  9 Mar 20:15:15 ActionQueueScrape.pl [31540 1 Swiss francs]: new IPReputation or files copied from nursery, necessary for the /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSync.pm 1760 line signal process.
  9 Mar 20:20:15 [31540 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  9 Mar 20:20:15 ActionQueueScrape.pl [31540 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 20:20:15 ActionQueueScrape.pl [31540 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  9 Mar 20:25:20 [31540 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  9 Mar 20:25:20 ActionQueueScrape.pl [31540 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 20:25:20 ActionQueueScrape.pl [31540 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  March 9 20:30:25 [31540 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  March 9 20:30:25 ActionQueueScrape.pl [31540 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  March 9 20:30:25 ActionQueueScrape.pl [31540 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  9 Mar 20:35:31 [31540 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  9 Mar 20:35:31 ActionQueueScrape.pl [31540 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 20:35:31 ActionQueueScrape.pl [31540 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  9 Mar 20:40:36 [31540 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  9 Mar 20:40:36 ActionQueueScrape.pl [31540 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 20:40:36 ActionQueueScrape.pl [31540 1 Swiss francs]: snort for reloading of data signaling IPReputation failed after two attempts to /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm line 1685.
  9 Mar 20:40:36 ActionQueueScrape.pl [31540 1 Swiss francs]: END of TASK. a2812330-E633-11e5-955f-fcea001d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 1521
  9 Mar 20:40:36 ActionQueueScrape.pl [739 1 Swiss francs]: START of TASK. 2da341fc-E637-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 0
  9 Mar 20:40:39 ActionQueueScrape.pl [739 1 Swiss francs]: update successfully pushed to UM 172.20.1.81 /usr/local/sf/lib/perl/5.10.1/SF/Synchronize/VerticalSync.pm line 396.
  9 Mar 20:40:39 ActionQueueScrape.pl [739 1 Swiss francs]: END of TASK. 2da341fc-E637-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 3
  9 Mar 20:41:19 ActionQueueScrape.pl [848 1 Swiss francs]: START of TASK. 46b61cc8-E637-11e5-99b6-75fc001d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 0
  9 Mar 20:41:19 ActionQueueScrape.pl [848 1 Swiss francs]: new IPReputation or files copied from nursery, necessary for the /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSync.pm 1760 line signal process.
  March 9 20:46:19 ActionQueueScrape.pl [848 1 Swiss francs]: cannot read the answer:
  March 9 20:46:19 ActionQueueScrape.pl [848 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  March 9 20:46:19 ActionQueueScrape.pl [848 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  9 Mar 20:51:24 ActionQueueScrape.pl [848 1 Swiss francs]: cannot read the answer:
  9 Mar 20:51:24 ActionQueueScrape.pl [848 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 20:51:24 ActionQueueScrape.pl [848 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  9 Mar 20:56:29 ActionQueueScrape.pl [848 1 Swiss francs]: cannot read the answer:
  9 Mar 20:56:29 ActionQueueScrape.pl [848 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 20:56:29 ActionQueueScrape.pl [848 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 9 21:01:35 ActionQueueScrape.pl [848 1 Swiss francs]: cannot read the answer:
  Mar 9 21:01:35 ActionQueueScrape.pl [848 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 9 21:01:35 ActionQueueScrape.pl [848 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 9 21:06:40 ActionQueueScrape.pl [848 1 Swiss francs]: cannot read the answer:
  Mar 9 21:06:40 ActionQueueScrape.pl [848 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 9 21:06:40 ActionQueueScrape.pl [848 1 Swiss francs]: snort for reloading of data signaling IPReputation failed after two attempts to /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm line 1685.
  9 Mar 21:06:40 ActionQueueScrape.pl [848 1 Swiss francs]: END of TASK. 46b61cc8-E637-11e5-99b6-75fc001d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 1521
  On 9 March 21:07:25 [2669 1 Swiss francs] ActionQueueScrape.pl: TASK BEGINNING | ec20b238-e63a-11e5-9d0d-af0d011d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 0
  On 9 March 21:07:25 ActionQueueScrape.pl [2669 1 Swiss francs]: new IPReputation or files copied from nursery, necessary for the /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSync.pm 1760 line signal process.
  On 9 March 21:07:39 ActionQueueScrape.pl [2699 1 Swiss francs]: START of TASK. f4f1391e-e63a-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 0
  On 9 March 21:07:42 ActionQueueScrape.pl [2699 1 Swiss francs]: update successfully pushed to UM 172.20.1.81 /usr/local/sf/lib/perl/5.10.1/SF/Synchronize/VerticalSync.pm line 396.
  On 9 March 21:07:42 ActionQueueScrape.pl [2699 1 Swiss francs]: END of TASK. f4f1391e-e63a-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 3
  Mar 9 21:12:25 [2669 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  Mar 9 21:12:25 ActionQueueScrape.pl [2669 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 9 21:12:25 ActionQueueScrape.pl [2669 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  On 9 March 21:17:30 [2669 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  On 9 March 21:17:30 ActionQueueScrape.pl [2669 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  On 9 March 21:17:30 ActionQueueScrape.pl [2669 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 9 21:22:36 ActionQueueScrape.pl [2669 1 Swiss francs]: cannot read the answer:
  Mar 9 21:22:36 ActionQueueScrape.pl [2669 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 9 21:22:36 ActionQueueScrape.pl [2669 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 9 21:27:41 1 ActionQueueScrape.pl Swiss francs [2669]: cannot read the answer:
  Mar 9 21:27:41 1 ActionQueueScrape.pl Swiss francs [2669]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 9 21:27:41 ActionQueueScrape.pl [2669 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  March 9 21:32:46 1 ActionQueueScrape.pl Swiss francs [2669]: cannot read the answer:
  March 9 21:32:46 1 ActionQueueScrape.pl Swiss francs [2669]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  March 9 21:32:46 ActionQueueScrape.pl [2669 1 Swiss francs]: snort for reloading of data signaling IPReputation failed after two attempts to /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm line 1685.
  March 9 21:32:46 ActionQueueScrape.pl [2669 1 Swiss francs]: END of TASK. ec20b238-e63a-11e5-9d0d-af0d011d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 1521
  9 Mar 21:33:28 ActionQueueScrape.pl [4536 1 Swiss francs]: START of TASK. 9001d064-e63e-11e5-B733-7ba0001d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 0
  Mar 9 21:33:29 ActionQueueScrape.pl [4536 1 Swiss francs]: new IPReputation or files copied from nursery, necessary for the /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSync.pm 1760 line signal process.
  9 Mar 21:33:42 ActionQueueScrape.pl [4574 1 Swiss francs]: START of TASK. 9869eda4-e63e-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 0
  Mar 9 21:33:44 ActionQueueScrape.pl [4574 1 Swiss francs]: update successfully pushed to UM 172.20.1.81 /usr/local/sf/lib/perl/5.10.1/SF/Synchronize/VerticalSync.pm line 396.
  9 Mar 21:33:44 ActionQueueScrape.pl [4574 1 Swiss francs]: END of TASK. 9869eda4-e63e-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 2
  March 9 21:38:29 [4536 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  March 9 21:38:29 ActionQueueScrape.pl [4536 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  March 9 21:38:29 ActionQueueScrape.pl [4536 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 9 21:43:34 [4536 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  Mar 9 21:43:34 ActionQueueScrape.pl [4536 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 9 21:43:34 ActionQueueScrape.pl [4536 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 9 21:48:39 [4536 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  Mar 9 21:48:39 ActionQueueScrape.pl [4536 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 9 21:48:39 ActionQueueScrape.pl [4536 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 9 21:53:44 [4536 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  Mar 9 21:53:44 ActionQueueScrape.pl [4536 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 9 21:53:44 ActionQueueScrape.pl [4536 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 9 21:58:49 [4536 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  Mar 9 21:58:49 [4536 1 Swiss francs] ActionQueueScrape.pl: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 9 21:58:49 ActionQueueScrape.pl [4536 1 Swiss francs]: snort for reloading of data signaling IPReputation failed after two attempts to /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm line 1685.
  9 Mar 21:58:49 ActionQueueScrape.pl [4536 1 Swiss francs]: END of TASK. 9001d064-e63e-11e5-B733-7ba0001d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 1521
  9 Mar 21:59:08 ActionQueueScrape.pl [6274 1 Swiss francs]: START of TASK. 257ed9b8-e642-11e5-9558-62b3001d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 0
  Mar 9 21:59:08 ActionQueueScrape.pl [6274 1 Swiss francs]: new IPReputation or files copied from nursery, necessary for the /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSync.pm 1760 line signal process.
  9 Mar 21:59:45 ActionQueueScrape.pl [6334 1 Swiss francs]: START of TASK. 3be283d0-e642-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 0
  Mar 9 21:59:47 ActionQueueScrape.pl [6334 1 Swiss francs]: update successfully pushed to UM 172.20.1.81 /usr/local/sf/lib/perl/5.10.1/SF/Synchronize/VerticalSync.pm line 396.
  9 Mar 21:59:47 ActionQueueScrape.pl [6334 1 Swiss francs]: END of TASK. 3be283d0-e642-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 2
  9 Mar 22:04:08 ActionQueueScrape.pl [6274 1 Swiss francs]: cannot read the answer:
  9 Mar 22:04:08 ActionQueueScrape.pl [6274 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 22:04:08 ActionQueueScrape.pl [6274 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  9 Mar 22:09:13 ActionQueueScrape.pl [6274 1 Swiss francs]: cannot read the answer:
  9 Mar 22:09:13 ActionQueueScrape.pl [6274 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 22:09:13 ActionQueueScrape.pl [6274 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  9 Mar 22:14:18 [6274 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  9 Mar 22:14:18 ActionQueueScrape.pl [6274 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 22:14:18 ActionQueueScrape.pl [6274 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  9 Mar 22:19:23 ActionQueueScrape.pl [6274 1 Swiss francs]: cannot read the answer:
  9 Mar 22:19:23 ActionQueueScrape.pl [6274 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 22:19:23 ActionQueueScrape.pl [6274 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  9 Mar 22:24:28 [6274 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  9 Mar 22:24:28 ActionQueueScrape.pl [6274 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 22:24:28 ActionQueueScrape.pl [6274 1 Swiss francs]: snort for reloading of data signaling IPReputation failed after two attempts to /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm line 1685.
  9 Mar 22:24:28 ActionQueueScrape.pl [6274 1 Swiss francs]: END of TASK. 257ed9b8-e642-11e5-9558-62b3001d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 1520
  9 Mar 22:24:47 [8015-1 Swiss francs] ActionQueueScrape.pl: TASK BEGINNING | bb89591c-E645-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 0
  9 Mar 22:24:50 ActionQueueScrape.pl [8015-1 Swiss francs]: update successfully pushed to UM 172.20.1.81 /usr/local/sf/lib/perl/5.10.1/SF/Synchronize/VerticalSync.pm line 396.
  9 Mar 22:24:50 ActionQueueScrape.pl [8015-1 Swiss francs]: END of TASK. bb89591c-E645-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 3
  9 Mar 22:25:16 ActionQueueScrape.pl [8115 1 Swiss francs]: START of TASK. cc845a32-E645-11e5-A118-bfc4001d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 0
  Mar 9 22:25:17 ActionQueueScrape.pl [8115 1 Swiss francs]: new IPReputation or files copied from nursery, necessary for the /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSync.pm 1760 line signal process.
  9 Mar 22:30:17 ActionQueueScrape.pl [8115 1 Swiss francs]: cannot read the answer:
  9 Mar 22:30:17 ActionQueueScrape.pl [8115 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 22:30:17 ActionQueueScrape.pl [8115 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  9 Mar 22:35:22 [8115 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  9 Mar 22:35:22 ActionQueueScrape.pl [8115 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 22:35:22 ActionQueueScrape.pl [8115 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  9 Mar 22:40:27 [8115 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  9 Mar 22:40:27 ActionQueueScrape.pl [8115 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 22:40:27 ActionQueueScrape.pl [8115 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  9 Mar 22:45:32 [8115 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  9 Mar 22:45:32 ActionQueueScrape.pl [8115 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 22:45:32 ActionQueueScrape.pl [8115 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  9 Mar 22:50:37 [8115 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  9 Mar 22:50:37 ActionQueueScrape.pl [8115 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 22:50:37 ActionQueueScrape.pl [8115 1 Swiss francs]: snort for reloading of data signaling IPReputation failed after two attempts to /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm line 1685.
  9 Mar 22:50:37 ActionQueueScrape.pl [8115 1 Swiss francs]: END of TASK. cc845a32-E645-11e5-A118-bfc4001d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 1521
  9 Mar 22:50:50 ActionQueueScrape.pl [9765 1 Swiss francs]: START of TASK. 5f045b48-e649-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 0
  9 Mar 22:50:52 ActionQueueScrape.pl [9765 1 Swiss francs]: update successfully pushed to UM 172.20.1.81 /usr/local/sf/lib/perl/5.10.1/SF/Synchronize/VerticalSync.pm line 396.
  9 Mar 22:50:52 ActionQueueScrape.pl [9765 1 Swiss francs]: END of TASK. 5f045b48-e649-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 2
  9 Mar 22:51:25 ActionQueueScrape.pl [9873 1 Swiss francs]: START of TASK. 73a08dce-e649-11e5-89FA-34d6001d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 0
  9 Mar 22:51:25 ActionQueueScrape.pl [9873 1 Swiss francs]: new IPReputation or files copied from nursery, necessary for the /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSync.pm 1760 line signal process.
  9 Mar 22:56:26 1 ActionQueueScrape.pl Swiss francs [9873]: cannot read the answer:
  9 Mar 22:56:26 ActionQueueScrape.pl [9873 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  9 Mar 22:56:26 ActionQueueScrape.pl [9873 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 9 23:01:31 [9873 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  Mar 9 23:01:31 [9873 1 Swiss francs] ActionQueueScrape.pl: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 9 23:01:31 [9873 1 Swiss francs] ActionQueueScrape.pl: signalling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 9 23:06:36 ActionQueueScrape.pl [9873 1 Swiss francs]: cannot read the answer:
  Mar 9 23:06:36 ActionQueueScrape.pl [9873 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 9 23:06:36 ActionQueueScrape.pl [9873 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 9 23:11:41 1 ActionQueueScrape.pl Swiss francs [9873]: cannot read the answer:
  Mar 9 23:11:41 ActionQueueScrape.pl [9873 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 9 23:11:41 ActionQueueScrape.pl [9873 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 9 23:16:46 1 ActionQueueScrape.pl Swiss francs [9873]: cannot read the answer:
  Mar 9 23:16:46 1 ActionQueueScrape.pl Swiss francs [9873]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 9 23:16:46 1 ActionQueueScrape.pl Swiss francs [9873]: snort for reloading of data signaling IPReputation failed after two attempts to /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm line 1685.
  Mar 9 23:16:46 1 ActionQueueScrape.pl Swiss francs [9873]: END of TASK. 73a08dce-e649-11e5-89FA-34d6001d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 1521
  Mar 9 23:16:53 ActionQueueScrape.pl [11581 1 Swiss francs]: START of TASK. 028181bc-e64d-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 0
  Mar 9 23:16:55 ActionQueueScrape.pl [11581 1 Swiss francs]: update successfully pushed to UM 172.20.1.81 /usr/local/sf/lib/perl/5.10.1/SF/Synchronize/VerticalSync.pm line 396.
  Mar 9 23:16:55 ActionQueueScrape.pl [11581 1 Swiss francs]: END of TASK. 028181bc-e64d-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 2
  Mar 9 23:17:30 ActionQueueScrape.pl [11690 1 Swiss francs]: START of TASK. 1843a868-e64d-11e5-ba33-88e7001d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 0
  Mar 9 23:17:30 ActionQueueScrape.pl [11690 1 Swiss francs]: new IPReputation or files copied from nursery, necessary for the /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSync.pm 1760 line signal process.
  Mar 9 23:22:30 ActionQueueScrape.pl [11690 1 Swiss francs]: cannot read the answer:
  Mar 9 23:22:30 ActionQueueScrape.pl [11690 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 9 23:22:30 ActionQueueScrape.pl [11690 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 9 23:27:35 [11690 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  Mar 9 23:27:35 ActionQueueScrape.pl [11690 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 9 23:27:35 ActionQueueScrape.pl [11690 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 9 23:32:41 1 ActionQueueScrape.pl Swiss francs [11690]: cannot read the answer:
  Mar 9 23:32:41 1 ActionQueueScrape.pl Swiss francs [11690]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 9 23:32:41 ActionQueueScrape.pl [11690 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 9 23:37:46 1 ActionQueueScrape.pl Swiss francs [11690]: cannot read the answer:
  Mar 9 23:37:46 1 ActionQueueScrape.pl Swiss francs [11690]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 9 23:37:46 ActionQueueScrape.pl [11690 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 9 23:42:51 [11690 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  Mar 9 23:42:51 [11690 1 Swiss francs] ActionQueueScrape.pl: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 9 23:42:51 ActionQueueScrape.pl [11690 1 Swiss francs]: snort for reloading of data signaling IPReputation failed after two attempts to /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm line 1685.
  Mar 9 23:42:51 ActionQueueScrape.pl [11690 1 Swiss francs]: END of TASK. 1843a868-e64d-11e5-ba33-88e7001d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 1521
  Mar 9 23:42:56 ActionQueueScrape.pl [13328 1 Swiss francs]: START of TASK. a5fe2798-E650-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 0
  Mar 9 23:42:57 ActionQueueScrape.pl [13328 1 Swiss francs]: update successfully pushed to UM 172.20.1.81 /usr/local/sf/lib/perl/5.10.1/SF/Synchronize/VerticalSync.pm line 396.
  Mar 9 23:42:57 ActionQueueScrape.pl [13328 1 Swiss francs]: END of TASK. a5fe2798-E650-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 1
  Mar 9 23:43:28 ActionQueueScrape.pl [13428 1 Swiss francs]: START of TASK. b8bf6e64-E650-11e5-ABC3-1af9001d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 0
  Mar 9 23:43:28 ActionQueueScrape.pl [13428 1 Swiss francs]: new IPReputation or files copied from nursery, necessary for the /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSync.pm 1760 line signal process.
  Mar 9 23:48:28 [13428 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  Mar 9 23:48:28 ActionQueueScrape.pl [13428 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 9 23:48:28 ActionQueueScrape.pl [13428 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 9 23:53:33 [13428 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  Mar 9 23:53:33 ActionQueueScrape.pl [13428 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 9 23:53:33 ActionQueueScrape.pl [13428 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 9 23:58:38 [13428 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  Mar 9 23:58:38 ActionQueueScrape.pl [13428 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 9 23:58:38 ActionQueueScrape.pl [13428 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 10 00:03:43 ActionQueueScrape.pl [13428 1 Swiss francs]: cannot read the answer:
  Mar 10 00:03:43 ActionQueueScrape.pl [13428 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 10 00:03:43 ActionQueueScrape.pl [13428 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 10 00:08:48 1 ActionQueueScrape.pl Swiss francs [13428]: cannot read the answer:
  Mar 10 00:08:48 1 ActionQueueScrape.pl Swiss francs [13428]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 10 00:08:48 ActionQueueScrape.pl [13428 1 Swiss francs]: snort for reloading of data signaling IPReputation failed after two attempts to /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm line 1685.
  Mar 10 00:08:48 ActionQueueScrape.pl [13428 1 Swiss francs]: END of TASK. b8bf6e64-E650-11e5-ABC3-1af9001d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 1520
  Mar 10 00:08:58 ActionQueueScrape.pl [15167 1 Swiss francs]: START of TASK. 49796e48-e654-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 0
  Mar 10 00:09:01 ActionQueueScrape.pl [15167 1 Swiss francs]: update successfully pushed to UM 172.20.1.81 /usr/local/sf/lib/perl/5.10.1/SF/Synchronize/VerticalSync.pm line 396.
  Mar 10 00:09:01 ActionQueueScrape.pl [15167 1 Swiss francs]: END of TASK. 49796e48-e654-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 3
  Mar 10 00:09:06 ActionQueueScrape.pl [15229 1 Swiss francs]: START of TASK. 4d786788-e654-11e5-974f-710a011d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 0
  Mar 10 00:09:06 ActionQueueScrape.pl [15229 1 Swiss francs]: new IPReputation or files copied from nursery, necessary for the /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSync.pm 1760 line signal process.
  Mar 10 00:14:06 1 ActionQueueScrape.pl Swiss francs [15229]: cannot read the answer:
  Mar 10 00:14:06 ActionQueueScrape.pl [15229 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 10 00:14:06 ActionQueueScrape.pl [15229 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 10 00:19:11 ActionQueueScrape.pl [15229 1 Swiss francs]: cannot read the answer:
  Mar 10 00:19:11 ActionQueueScrape.pl [15229 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 10 00:19:11 ActionQueueScrape.pl [15229 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 10 00:24:16 [15229 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  Mar 10 00:24:16 ActionQueueScrape.pl [15229 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 10 00:24:16 ActionQueueScrape.pl [15229 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 10 00:29:21 1 ActionQueueScrape.pl Swiss francs [15229]: cannot read the answer:
  Mar 10 00:29:21 1 ActionQueueScrape.pl Swiss francs [15229]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 10 00:29:21 ActionQueueScrape.pl [15229 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 10 00:34:26 [15229 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  Mar 10 00:34:26 ActionQueueScrape.pl [15229 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 10 00:34:26 ActionQueueScrape.pl [15229 1 Swiss francs]: snort for reloading of data signaling IPReputation failed after two attempts to /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm line 1685.
  Mar 10 00:34:26 ActionQueueScrape.pl [15229 1 Swiss francs]: END of TASK. 4d786788-e654-11e5-974f-710a011d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 1520
  Mar 10 00:34:44 ActionQueueScrape.pl [16915 1 Swiss francs]: START of TASK. e29624c4-e657-11e5-90b2-cb9c001d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 0
  Mar 10 00:34:45 ActionQueueScrape.pl [16915 1 Swiss francs]: new IPReputation or files copied from nursery, necessary for the /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSync.pm 1760 line signal process.
  Mar 10 00:35:01 ActionQueueScrape.pl [16959 1 Swiss francs]: START of TASK. ecf68012-e657-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 0
  Mar 10 00:35:04 ActionQueueScrape.pl [16959 1 Swiss francs]: update successfully pushed to UM 172.20.1.81 /usr/local/sf/lib/perl/5.10.1/SF/Synchronize/VerticalSync.pm line 396.
  Mar 10 00:35:04 ActionQueueScrape.pl [16959 1 Swiss francs]: END of TASK. ecf68012-e657-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 3
  Mar 10 00:39:45 [16915 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  Mar 10 00:39:45 ActionQueueScrape.pl [16915 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 10 00:39:45 ActionQueueScrape.pl [16915 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 10 00:44:50 [16915 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  Mar 10 00:44:50 ActionQueueScrape.pl [16915 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 10 00:44:50 ActionQueueScrape.pl [16915 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 10 00:49:55 [16915 1 Swiss francs] ActionQueueScrape.pl: failed to read the answer:
  Mar 10 00:49:55 ActionQueueScrape.pl [16915 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 10 00:49:55 ActionQueueScrape.pl [16915 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 10 00:55:00 1 ActionQueueScrape.pl Swiss francs [16915]: cannot read the answer:
  Mar 10 00:55:00 ActionQueueScrape.pl [16915 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 10 00:55:00 ActionQueueScrape.pl [16915 1 Swiss francs]: signaling snort to reload the data of IPReputation failed, retrying... on line /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm 1662.
  Mar 10 01:00:05 ActionQueueScrape.pl [16915 1 Swiss francs]: cannot read the answer:
  Mar 10 01:00:05 ActionQueueScrape.pl [16915 1 Swiss francs]: (IPRepReload) command to 10229112-d54f-11e5-8c17-73403b7b4bc7 instance 1 failed at line /usr/local/sf/lib/perl/5.10.1/SF/Snort/Control.pm 49.
  Mar 10 01:00:05 ActionQueueScrape.pl [16915 1 Swiss francs]: snort for reloading of data signaling IPReputation failed after two attempts to /usr/local/sf/lib/perl/5.10.1/SF/IPReputation/IPRepSupport.pm line 1685.
  Mar 10 01:00:05 ActionQueueScrape.pl [16915 1 Swiss francs]: END of TASK. e29624c4-e657-11e5-90b2-cb9c001d157c | Synchronization of security intelligence from FirepowerManagementCenter. Initialization. 1521
  Mar 10 01:01:04 ActionQueueScrape.pl [18650 1 Swiss francs]: START of TASK. 9070d23a-e65b-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 0
  Mar 10 01:01:07 ActionQueueScrape.pl [18650 1 Swiss francs]: update successfully pushed to UM 172.20.1.81 /usr/local/sf/lib/perl/5.10.1/SF/Synchronize/VerticalSync.pm line 396.
  Mar 10 01:01:07 ActionQueueScrape.pl [18650 1 Swiss francs]: END of TASK. 9070d23a-e65b-11e5-BE19-9427c10784de | Synchronize with UM. Sending update | 3
  ..............

  If I was the one to help me I would like to in the sense of the Cisco TAC. Do you have one tips other than that? :)

  6.0.0.1 bleeding edge new.  Can return you to 5.4.0.6?

  If Yes, you will need to open a case with Cisco TAC and advance in the process of bug, which could take many months.

• ASA-SSM-20/40 IPS Software upgrade quesiton

  I'm looking to upgrade the IPS modules (ASA-SSM-20 and ASA-SSM-40) on two different ASA to ver 7.1 (11) E4 under this field notice:

  http://www.Cisco.com/c/en/us/support/docs/field-notices/640/fn64080.html

  My question is around if traffic through the firewall is affected during this update and subsequent restart of the IPS module.

  On the ASAs, a service policy is in place that will allow the traffic in the case where the IPS module becomes unavailable.  It comes, it will actually happen during the update?

  Suggestions and comments are welcome.

  Thanks in advance.

  John

  If your IPS is inline and as a whole do not open then the traffic through the ASA (in assuming an ASA standalone and do not form part of a pair of HA) will not be affected when the service IPS module reload.

  If an SAA is in a pair of HA and a service (ips, cxsc, or sfr) module fails, it will be by default triggers a failover event. (ASA 9.5 introduces the possibility to change this behavior.) The result is the same - no service interruption (Although TCP connections may need to restore if you have not configured stateful failover).

• Reloading of the AIP - SSM

  reload the module AIP - SSM affect the ASA?

  Exactly. If you don't have a political card by using the SSM module, then you can reload the module SSM and it does not affect the traffic passing by ASA. To give you more information, here is a link that gives you information on how to configure ASA to use the SSM module:

  http://www.Cisco.com/univercd/CC/TD/doc/product/multisec/asa_sw/v_7_2/conf_gd/firewall/SSM.htm#wp1050744

  Hope that helps.

  Kind regards

  Maryse.

• Upgrade ASA zero downtime

  I have a pair of ASA-5585-X in a failover active-standby configuration.  They are running the version of the software 8.4.3.  I'm looking to upgrade to 9.1.1.  From the release notes, I understand that, in order to perform an upgrade "no interruption of service", I need to spend the last minor version in a major release for the next major release.  On this basis, my understanding is that the upgrade would require three steps: Version 8.4.5, 9.0.1, 9.1.1.  Is this correct?

  Is it possible to go directly from 8.4.3 to 9.1.1 and if so, what are the operational considerations of this upgrade?  My reading of the release notes is not to indicate any special procedure that will be followed either by performing the steps in upgrade.  I suppose there may be a period of service interruption, but I could see not any special requirements to perform a direct upgrade.

  All information on the dangers of a direct upgrade are appreciated.  Operational experience (such as "it my network on fire and killed three kittens") much appreciated.  Save the kittens!

  Thanks,-Ed

  You can directly upgrade from 8.4 (3) 9.1 (1). Yes the release notes recommend to go via 8.4 (5) and 9.0 (1), but it is not really necessary.

  Standard procedure. In short:

  • load the image on disk0 two units:
  • change the initialization variable
  • Save the config change
  • the active unit, "failover reload-standby.
  • wait for successful reload and verify the configuration is synced OK. You expect a message that mate version of the software is different.
  • "no failover active" on the active unit
  • Connect to the newly active unit and "failover reload-standby.
  • wait for top-up meet and verify the configuration is synced OK. Both units are now on 9.1 (1).

  Optionally, change your main unit to on if that bothers you. I would like to delete the old image once things are OK after a few days. You must also update your ASDM image (and the varaible pointing to it) while you're there.

  No kittens are harmed in this process.

• Upgrade ASA 5510 7.0 (6) 8.2 (5)

  Hi, I want to upgrade my ASA 5510 version 7.0 (6) 8.2 (5).  Read the release notes for 8.2 (5) it is said that the requirement of DRAM is 256 MB unless you have high CPU utilization. He also says that I have to upgrade through the main version of 7.0 (x) to 7.1 (x) and 7.1 (x) to 7.2 (x) and 7.2 (x) to 8.2 (x).  The questions are:

  -My ASA has 256 MB of RAM and 68% of free memory, if you think it will run version 8.2 (5) without any problems?

  -When you make upgrades to major releases, are there considerations concerning the configuration file? Or the versions to use for versions 7.1 and 7.2?

  -Would you recommend doing all the updates in a single window of maintanance?  How long might take?

  -It should not be a problem with 256 MB when you run version 8.2.x unless the SAA is in the way of a high traffic load. However, if you have decided to upgrade to version 8.3 and above all in the future, it requires certainly 1 GB of DRAM on ASA 5510.

  -There are minor changes to configuration of version 7.0 to 8.2. However, if you are running SSL VPN on version 7.x, then the customer should be changed to AnyConnect SSL VPN. However, if you have decided to upgrade to version 8.3 and above, there are major code changes.

  -I do not see a problem of upgrade under a maintenance window. How long it might take is something that I could not answer. It really depends on your environment and as you know with any updates/changes, it can go smoothly or can go horribly wrong, so I can't estimate on your behalf. If all goes well, I can't be too long, basically, download the software at the ASA, change the boot image and reload. And you have to apply to all the release mentioned in the release notes. Normally, I would estimate over shorter time (to give you enough time to restore, just in case it won't).

  I hope this helps.

• How to change the ASA and ASDM on ASA5505 questioned once

  Can anyone suggest the way to upgrade the software on the Cisco ASA5505 simultaneously both ASA and ASDM without trouble, like I just did?

  Here is what happened.  I copied the files asa821 - k8.bin and asdm - 621.bin for flash memory, then renamed the old versions like Oasa724 - k8.bin and Oasdm - 524.bin and then issued the command reload from the GUI of Windows.

  Big mistake, I lost connectivity ASDM entirely and has been obliged to buy a USB to serial port adapter and plug the cable from port of CLI command so she can return to the unit.  I found that he was running the kernel asa821 - k8.bin, as expected, but apparently the ASDM was still under the version 5.24.

  Should I have created a new folder and moved the older versions of this file, then issued the command reload system and hope for the best?

  I feel that I've defiled things upwards, I guess I have to use tftp to reload the boot image to get the ASA5505 back up again (using the ROMMON commands)

  In fact, the only way that I was able to recover the GUI of Windows used start to asa724 image - k8.bin older command.

  What is the right way to upgrade to new versions asa 8.2 (1) and asdm 6.2 (1)?

  Really, I don't want to risk losing my ability to speak with this box and I spent an anxious afternoon yesterday, when I got to the pop-up message box "can not display the asdm manager."

  ======

  After working with the CLI port, I noticed the following error:

  Set of images of Manager devices, but unable to find disk0: / asdm - 524.bin
  Out of config line 75, "asdm image disk0: / asdm-5...» »

  So apparently some configuration file must point to the correct asdm and just blindly change the files in the folder will NOT work.

  ========

  After working more with the port of the CLI and the GUI of Windows port, I found that the 'asdm image' command did NOT work in the CLI software, but was apparently working in the GUI software, so I ran this command to tell the system to use the recent 6.21 on start.

  After that and issuing the command reload of the CLI, I was able to set up successfully with the latest software of asa and asdm.

  I would like to have access to CLI is valuable in this case.

  I DON'T know why the command 'asdm image' appears inaccessible on the CLI port.

  Any ideas?

  As far as I'm concerned this problem has been resolved (using educated error)

  The boot of the ASA when he tries to use the command 'system startup' file in the config. If it is not very well this file (it was not there because you renamed it), it starts the first image he will find...

  However for ASDM ASA uses just the image you have. You were pointing to asdm5.2 and renamed, there was no valied ASDM image to use.

  In other words you must have just changed the 'asdm image"and"system start"commands in the config and point to new files, save the configuration and restart and then it would have worked fine.

  I hope it helps.

  PK

• AIP - SSM Reload

  During the initial Setup, the installation program asks to reload the module (SSM).

  This charge will not affect the ASA5520 somehow?

  Thank you

  Virgil

  It will not reload the ASA so if the module is reloaded. Only the module itself is reloaded.