8 Comments

  1. Jasim
    February 3, 2019 @ 12:22 am

    I have a similar problem with FTD in HA pair, Critical alert on FMC shows that the standby FTD is not receiving packets on 3 out of 17 sub-interfaces of a port-channel .
    Unlike ASA-FP, FTD in HA pair does not give an option to assign different health policies to active and standby device. Do you have any workaround for FTD in HA pair to turn off the interface status monitoring?

    Reply

    • lammle
      February 3, 2019 @ 8:47 am

      You need to turn off the interface status in the health policy applied to your FTD devices that have sub interfaces. That is the only workaround unfortunately.

      Reply

  2. farblos
    March 13, 2019 @ 10:23 am

    Another question: What will happen when a Failover occurs? I’m assuming that the Secondary Health Policy (HP) will remain on the Secondary Active ASA/FTD now; thus the Primary Standby ASA/FTD will now generate alerts because of the Primary HP which is monitoring the Interface Status. Please correct me if I’m wrong but I guess that the issue will continue when there’s a Failover event.

    Reply

    • lammle
      March 13, 2019 @ 11:48 am

      no, because they are virtually one device, not two, so you don’t have this issue.

      Reply

  3. Karl
    April 30, 2019 @ 4:24 am

    When I try to apply second policy, it will only allow me to apply to the cluster, Active and standby, not one or the other..Is there a way round that?

    Reply

  4. Amit
    May 27, 2019 @ 2:46 am

    In case of failover, we still get this alarm as on primary (now Standby) has the policy which monitors the interface for traffic.

    Reply

    • lammle
      May 27, 2019 @ 6:06 am

      with ASA with Firepower, you must disable the interface monitoring for both ASA devices, assuming HA pair.

      Reply

  5. Amit
    May 27, 2019 @ 2:48 am

    Here im talking about ASA with Firepower (Separate SFR module). Is there any way to fix that ?

    Reply

Leave a Reply

Your email address will not be published. Required fields are marked *